The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/process.py executes forensic utilities like log2timeline.py and timesketch_importer through subprocess.run using argument lists. This is a secure practice that avoids shell injection vulnerabilities.
[EXTERNAL_DOWNLOADS]: The skill references and utilizes official libraries and forensic frameworks, such as the Timesketch API client and the Plaso toolset, which are standard components for the defined use case.
[INDIRECT_PROMPT_INJECTION]: The skill ingests forensic data from external sources, creating an inherent data ingestion surface. However, it relies on structured parsing and lacks any patterns of unsafe data interpolation into agent prompts, mitigating the risk of injection attacks.

building-incident-timeline-with-timesketch