The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides numerous instructions for the agent to execute high-privilege commands using sudo, including package installation via apt and dnf, and system-wide security audits using oscap and lynis. These operations are standard for the tool's purpose but involve significant system access.
[PERSISTENCE]: The documentation includes instructions for setting up recurring automated scans by creating configuration files in /etc/cron.d/ (e.g., oscap-nightly and lynis-weekly). While presented as a user feature for continuous monitoring, this demonstrates a method for establishing persistent command execution.
[PRIVILEGE_ESCALATION]: The skill relies on sudo for nearly all its core functions, including reading system configuration files and generating remediation scripts. It appropriately includes warnings about the risks of using the --remediate flag and recommends testing on non-production systems first.

linux-benchmark-scanning