The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses shell commands via the Bash tool (e.g., docker exec, grep, tail, ps) to inspect logs and monitor process health. These operations are restricted to the local container environment and are essential for the skill's diagnostic functionality.
[PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection because it ingests untrusted data from various log files. While no malicious exploitation is present, the capability exists for an attacker to include instructions in log messages that the agent might process.
Ingestion points: Log files such as system/messages and php/error.log are read using the Read and Grep tools.
Boundary markers: The instructions do not explicitly mandate delimiters or specific warnings to isolate log content from the agent's internal reasoning.
Capability inventory: The skill has access to the Bash tool, which allows for arbitrary shell execution.
Sanitization: There is no evidence of sanitization or filtering of the log content before it is presented to the agent.

log-analyzer