The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides instructions to execute various command-line utilities for network reconnaissance, such as dig, dnsrecon, gobuster, and amass. These tools are used for standard DNS enumeration tasks.
[EXTERNAL_DOWNLOADS]: The skill documentation references the dnspython library and wordlists from the SecLists repository on GitHub. These are well-known resources in the cybersecurity community.
[INDIRECT_PROMPT_INJECTION]: The skill ingests data from external DNS servers, which creates a potential surface for indirect prompt injection if an attacker controls those records.
Ingestion points: DNS record queries in scripts/agent.py through functions like enumerate_dns_records and attempt_zone_transfer.
Boundary markers: No explicit delimiters or instructions are used to separate external DNS data from the agent's logic.
Capability inventory: The script agent.py has the ability to write result files to the local file system using json.dump. It does not possess capabilities for dynamic code execution or privileged system access.
Sanitization: The script converts DNS records to strings and performs basic whitespace stripping, but does not perform comprehensive content filtering for prompt injection patterns.

performing-dns-enumeration-and-zone-transfer