The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to execute several network manipulation and monitoring tools using sudo, including arpspoof, ettercap, tcpdump, and tshark.
[PRIVILEGE_ESCALATION]: Uses sudo sysctl to modify the net.ipv4.ip_forward kernel parameter. This changes the host system's behavior at the administrative level to allow the relaying of intercepted packets between victims.
[DATA_EXFILTRATION]: The skill's primary function is to perform man-in-the-middle (MITM) attacks to intercept and capture sensitive data from other hosts, including HTTP POST credentials and DNS queries as demonstrated in Step 4 of the workflow.
[INDIRECT_PROMPT_INJECTION]: The script scripts/agent.py accepts external inputs via command-line arguments that are processed without sanitization.
Ingestion points: sys.argv[1] (target_ip) and sys.argv[2] (gateway_ip) in scripts/agent.py.
Boundary markers: None identified; inputs are used directly in logic.
Capability inventory: The script uses Scapy's sendp and srp functions to craft and transmit raw Layer 2 packets.
Sanitization: Absent; IP addresses are passed directly to Scapy's ARP class without validation.

performing-arp-spoofing-attack-simulation