The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes standard system administration tools including apt-config, unattended-upgrade, systemctl, dpkg, and fuser. These operations are limited to the stated purpose of auditing and managing system updates.
[PRIVILEGE_ESCALATION]: Administrative actions are protected by explicit root checks ([[ $EUID == 0 ]]). The script applies restrictive permissions (0600 for configuration files and 0700 for backup directories) and uses umask 077 to ensure data created at runtime is not accessible to unauthorized users.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from system sources including apt-config output, APT drop-in files, and upgrade logs (SKILL.md, references/apt-config.md). Boundary markers or delimiters for this data are absent. The skill has significant capabilities, including the ability to write system configuration files and manage systemd timers. Sanitization is limited to filtering via grep before processing values.
[SAFE]: The configuration script (scripts/setup-auto-updates.sh) implements a robust rollback mechanism using shell traps. If validation fails or service activation is unsuccessful, it automatically restores the previous configuration and reverts changed service states.

auto-updates