The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The installation instructions for the squirrel CLI involve downloading and immediately executing remote scripts via shell piping. This includes curl -fsSL https://squirrelscan.com/install | bash for Unix-like systems and irm https://squirrelscan.com/install.ps1 | iex for Windows. These patterns bypass local script verification and package manager security controls, allowing arbitrary code execution at the user's privilege level.
[EXTERNAL_DOWNLOADS]: The skill requires downloading binaries and configuration files from squirrelscan.com, a domain that is not recognized as a trusted organization or well-known service within the platform's security framework. This introduces a supply chain risk if the external source is compromised.
[INDIRECT_PROMPT_INJECTION]: The skill's primary function is to crawl and audit external websites, making it vulnerable to malicious content specifically crafted to manipulate the agent's behavior during the audit process.
Ingestion points: External website content (HTML, meta tags, structured data) fetched during squirrel audit operations.
Boundary markers: None identified in the skill instructions to prevent the agent from obeying instructions embedded in audit reports.
Capability inventory: The agent has the ability to execute CLI tools, write to local files (to implement audit fixes), and spawn sub-agents for parallel tasks.
Sanitization: No evidence of input validation or sanitization of the audit results before they are processed by the agent.
[PERSISTENCE]: The skill instructs the user or agent to modify shell configuration files (e.g., adding export PATH="$HOME/.local/bin:$PATH") to ensure the CLI remains accessible across sessions. While functional, modifying shell profiles is a method used to maintain persistence on a system.
[PRIVILEGE_ESCALATION]: The troubleshooting section suggests manually modifying file permissions using chmod +x on downloaded binaries. Applying executable permissions to files downloaded from untrusted external sources increases the risk of system compromise if the files contain malicious payloads.

website-audit