The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill downloads the Velociraptor binary directly from its official GitHub repository, which is a well-known service. The binary is used to establish the forensic server and client environment.
[COMMAND_EXECUTION]: The SKILL.md and scripts/agent.py files contain instructions and code to execute shell commands for configuring the Velociraptor server, repacking installers, and managing forensic flows.
[PRIVILEGE_ESCALATION]: The deployment instructions in SKILL.md require the use of sudo to install the Velociraptor binary as a system service and to manage the local file system for server operations.
[PERSISTENCE]: The skill configures Velociraptor to run as a systemd service (Linux) or a Windows service, which is a persistence mechanism intended for the platform's operational stability.
[DATA_EXFILTRATION]: The skill is designed to collect highly sensitive forensic data, including the Master File Table ($MFT), registry hives, and event logs, and transmit this data to a Velociraptor API server defined by the user in environment variables.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data collected from endpoints (such as process names, command lines, and log entries) which could contain malicious instructions designed to influence the agent's analysis.
Ingestion points: The analyze_collection_results function in scripts/process.py reads and iterates through JSON result files collected from endpoints.
Boundary markers: Absent; the skill does not use delimiters or instructions to ignore potential commands embedded within the forensic data.
Capability inventory: The skill can perform network operations via scripts/agent.py and write files to the local directory in scripts/process.py.
Sanitization: Absent; the data is checked for simple string indicators without escaping or validation of the content against malicious patterns.
[METADATA_POISONING]: There is a discrepancy between the author listed in the YAML frontmatter ('mahipal') and the copyright holder in the LICENSE file ('mukul975'), which may indicate inconsistent metadata management.

implementing-velociraptor-for-ir-collection