The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The instructions recommend granting the service account extensive and risky permissions that exceed the principle of least privilege.
Evidence in SKILL.md suggests adding the scan service account to the Domain Admins group via Add-ADGroupMember -Identity "Domain Admins" -Members "SVC_VulnScan".
Evidence in SKILL.md suggests granting the Linux service account passwordless sudo access to read /etc/shadow, which contains hashed user passwords, via /bin/cat /etc/shadow in the sudoers configuration.
[COMMAND_EXECUTION]: The automation scripts are designed to execute commands on remote target systems using authenticated protocols.
scripts/process.py uses SSH via paramiko and WinRM via pywinrm to run host identification and privilege check commands (e.g., id && uname -a, whoami, net localgroup Administrators) on remote machines.
[DATA_EXFILTRATION]: The orchestration script provides functionality to export sensitive vulnerability data from external scanner APIs.
scripts/agent.py implements API calls to Tenable Nessus for exporting scan results to files using the /scans/{id}/export endpoint.
[EXTERNAL_DOWNLOADS]: The skill documentation and scripts direct the installation of several third-party Python packages for network and system interaction.
Dependencies include requests, paramiko, pywinrm, pysnmp, pandas, and impacket.

performing-authenticated-vulnerability-scan