The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The script scripts/remediate.py contains hardcoded credentials (GITEA_PASS = "gitops-admin-123") used for authenticating with a local Gitea instance. These credentials are used in basic authentication headers and embedded directly into Git remote URLs, which may lead to exposure in shell history, process listings, or logs.\n- [COMMAND_EXECUTION]: The skill relies entirely on executing shell commands via the subprocess module to perform its functions. Capability scripts in the scripts/ directory call external binaries like kubectl, talosctl, and git. While a read-only guard is implemented in scripts/kube.py to restrict allowed verbs, the overall architecture maintains a high surface area for command-related issues.\n- [DYNAMIC_EXECUTION]: In scripts/certs.py, the skill executes a shell command using shell=True to pipe output between openssl processes. The command incorporates a port variable extracted from the cluster configuration. Although this variable is validated using a numeric regular expression, the use of shell execution for dynamic command assembly is a sensitive pattern.\n- [EXTERNAL_DOWNLOADS]: Several capabilities, specifically those in scripts/vuln.py and scripts/upgrade.py, require and interact with third-party security binaries such as trivy, grype, pluto, and kubent. The skill checks the system PATH for these tools and executes them if present to perform vulnerability and API deprecation scans.

platform-sre