The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts/agent.py script executes various system commands using subprocess.run to gather system information and identify misconfigurations. It employs a wrapper method that enables shell mode if command operators like pipes or semicolons are present.
[DATA_EXFILTRATION]: The assessment script includes checks for the existence and writability of sensitive system files, including /etc/passwd and /etc/shadow. Accessing these paths identifies potential exposure of sensitive authentication information.
[PRIVILEGE_ESCALATION]: The skill provides structured instructions and automated logic for discovering and demonstrating paths to root or SYSTEM-level control. This includes techniques like exploiting unquoted service paths, SUID binary abuse, and Windows token impersonation.
[EXTERNAL_DOWNLOADS]: The documentation references and encourages the use of several third-party security tools, including linPEAS, winPEAS, PrintSpoofer, and GodPotato. These tools are suggested for download from public GitHub repositories to support assessment activities.

performing-privilege-escalation-assessment