The Agent Skills Directory

[DYNAMIC_CONTEXT_INJECTION]: The skill uses the platform's dynamic context syntax (!command) to check for the installation status and version of the gobuster binary and to verify the presence of wrapper shell scripts. These commands are diagnostic and perform no sensitive operations.
[EXTERNAL_DOWNLOADS]: The skill provides instructions to download wordlists from the industry-standard SecLists repository on GitHub and to install the gobuster utility from its official repository. These references target reputable sources within the security community.
[INDIRECT_PROMPT_INJECTION]: The skill accepts user-supplied target domains and wordlist paths which are interpolated into shell commands, creating a potential attack surface.
Ingestion points: User-provided <target>, <domain>, and <wordlist> parameters in SKILL.md.
Boundary markers: None explicitly defined in the command templates.
Capability inventory: Execution of shell scripts and the gobuster CLI tool.
Sanitization: The skill explicitly mentions that all commands are validated against a .pentest/scope.json file via a PreToolUse hook before execution.
[COMMAND_EXECUTION]: The skill is designed to execute the gobuster command-line utility and local wrapper scripts to perform security discovery tasks.

gobuster