The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill downloads the secure-properties-tool.jar directly from the official MuleSoft documentation website (https://docs.mulesoft.com/mule-runtime/4.4/_attachments/secure-properties-tool.jar). This download originates from a trusted vendor domain.
[COMMAND_EXECUTION]: The skill utilizes java -cp to execute the encryption tool. This command incorporates user-provided encryption keys and sensitive values scanned from the local filesystem to generate encrypted strings.
[INDIRECT_PROMPT_INJECTION]: The skill ingests data from local XML and properties files (src/main/mule and src/main/resources) to identify values for encryption. While this presents an untrusted data ingestion surface, the skill implements user confirmation steps before performing any file modifications or execution tasks. Ingestion points: Project XML files in src/main/mule and property/YAML files in src/main/resources. Boundary markers: Not explicitly utilized during the scanning process. Capability inventory: File system read/write, directory creation (mkdir), network downloads (curl/wget), and shell command execution (java). Sanitization: The skill does not explicitly mention sanitizing values extracted from files before passing them to the shell command.

secure-mule-app