The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to parse and extract metadata from untrusted binary files, such as malware samples or memory dumps. This data often contains strings (e.g., User-Agent headers, C2 server addresses, URIs) that are subsequently displayed to the user or agent.
Ingestion points: File content read by scripts/agent.py and scripts/process.py via open().read().
Boundary markers: The skill uses basic formatting and JSON structure to delimit output. However, there are no specific markers or warnings to ignore potentially malicious natural language instructions embedded within the malware's metadata.
Capability inventory: The skill possesses capabilities for reading arbitrary filesystem paths (via sys.argv) and writing to the local filesystem (report generation).
Sanitization: Extracted strings are decoded with utf-8 replacement for errors, but they are not sanitized to strip potential LLM-targeted injection patterns. Combined with the agent's broad reading capability, this represents a low-severity vulnerability surface.
[COMMAND_EXECUTION]: The provided Python scripts and the SKILL.md workflows involve executing command-line utilities that operate on local files. While the operations (hashing, binary parsing, and JSON generation) are functional and legitimate for the stated purpose, the execution environment should ensure that user-provided paths are validated to prevent directory traversal or access to unintended system files.

analyzing-cobalt-strike-beacon-configuration