The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The skill instructs the agent to provide the user with commands requiring sudo privileges. Specifically, it provides templates for modifying the root-owned Docker configuration file at /root/.docker/config.json and executing nerdctl with administrative rights.
[CREDENTIALS_UNSAFE]: The reference material in references/build-command.md contains a shell command template designed to write authentication credentials (username and password) into the Docker configuration file. While it uses placeholders like USER:PASS, the pattern encourages the insecure handling of secrets in shell history or scripts.
[REMOTE_CODE_EXECUTION]: The references/rust.md file includes a Dockerfile RUN instruction template that uses the curl | sh pattern to install the Rust toolchain from https://sh.rustup.rs. This is the official and well-known installation method for Rustup.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (CI Dockerfiles) and interpolates values from those files (such as project names or paths) into the generation of shell commands and new Dockerfiles.
Ingestion points: Reading existing Dockerfiles from the local filesystem.
Boundary markers: None; the skill reads the file "end to end" and preserves stage structure.
Capability inventory: Writing a new file (Dockerfile.local) and assembling a shell command (sudo nerdctl build ...) to be printed to the user.
Sanitization: There are no instructions to sanitize or escape strings extracted from the source Dockerfile before they are used to build the final shell command.
[COMMAND_EXECUTION]: The primary output of the skill is a complex shell command intended for the user to run in their terminal. This includes backgrounding the process and redirecting output to /tmp/build.log.

dockerfile-cache-xp