The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill downloads and executes shell and PowerShell scripts directly from a remote server (https://connect.aiscientist.tools/install.sh and https://connect.aiscientist.tools/install.ps1) using piped commands (| sh and | iex). This allows the remote source to execute arbitrary code on the local system.\n- [EXTERNAL_DOWNLOADS]: The skill downloads Python dependency specifications from https://connect.aiscientist.tools/install-requirements.txt and performs installation using pip.\n- [PERSISTENCE]: The skill provides instructions to install a background service using tuplatform-service install, which allows shared tools to remain active across system reboots and logouts.\n- [COMMAND_EXECUTION]: The skill uses shell commands for process management, log handling, and installation. It employs Python logic to spawn background processes in new sessions to ensure they continue running independently.\n- [DYNAMIC_EXECUTION]: The skill dynamically generates a Python script (share_tool.py) that imports and executes local code, exposing it to remote access.\n- [PRIVILEGE_ESCALATION]: The skill uses Set-ExecutionPolicy Bypass in PowerShell to execute downloaded scripts, bypassing local security restrictions on script execution.\n- [INDIRECT_PROMPT_INJECTION]: The skill creates an attack surface for indirect prompt injection by exposing local functions to remote calls.\n
Ingestion points: The generated share_tool.py accepts inputs from remote callers.\n
Boundary markers: The generated code lacks explicit delimiters to separate remote input from instructions.\n
Capability inventory: The tu toolset allows network communication and service installation.\n
Sanitization: The instructions recommend input validation and size checking to mitigate risks.

tooluniverse-share-computer