The Agent Skills Directory

[SAFE]: The skill serves as a reference for Linux security monitoring and detection. It describes fundamental operating system internals like namespaces, cgroups, and the process lifecycle without implementing any harmful functionality.
[COMMAND_EXECUTION]: The provided bash snippets are standard Linux Audit (auditd) configuration rules for system telemetry and do not execute malicious scripts or commands.
[DATA_EXFILTRATION]: While sensitive paths like /etc/shadow and SSH key directories are mentioned, they are identified as targets for auditing and monitoring, with no evidence of unauthorized access or network exfiltration.
[OBFUSCATION]: No encoded strings, hidden URLs, or character-based evasion techniques were identified during analysis.
[REMOTE_CODE_EXECUTION]: The skill does not perform remote downloads or include instructions to execute untrusted code.

linux-internals