The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts scripts/agent.py and scripts/process.py execute the trivy command-line utility via subprocess.run. The implementation uses argument lists rather than shell strings, which effectively prevents shell injection vulnerabilities.
[EXTERNAL_DOWNLOADS]: The SKILL.md documentation describes fetching the Trivy GPG signing key and repository configuration from aquasecurity.github.io. This is the official distribution channel for the Trivy tool provided by Aqua Security.
[PRIVILEGE_ESCALATION]: The skill instructs the user to use sudo for installing system dependencies and the Trivy scanner itself. This is standard and necessary for package management operations on Linux systems.
[INDIRECT_PROMPT_INJECTION]: The skill ingests external data in the form of Docker image references and scan results. 1. Ingestion points: Image name arguments in scripts/agent.py and scripts/process.py. 2. Boundary markers: Absent. 3. Capability inventory: The skill has subprocess execution and file system write capabilities. 4. Sanitization: The risk is mitigated by using structured JSON parsing and avoiding shell-based command execution. While these are ingestion points for external data, the tool's focus is on deterministic security scanning.

scanning-docker-images-with-trivy