The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/agent.py uses subprocess.run to execute the system's hashcat utility. The command is constructed using a list of arguments, which prevents shell injection vulnerabilities. This is the primary and intended function of the skill to facilitate hash cracking.
[EXTERNAL_DOWNLOADS]: Documentation within references/standards.md includes references to the official Hashcat project and well-known wordlist repositories such as SecLists. These are established resources in the cybersecurity community used for legitimate security testing and are not associated with malicious content delivery.
[DATA_EXFILTRATION]: While the skill processes sensitive data such as password hashes and cracked credentials, all operations occur locally. Temporary results are stored in /tmp/hashcat_out.txt and potfiles are read from local paths. No network operations were found that would transmit this data to external or untrusted domains.

performing-hash-cracking-with-hashcat