The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill provides instructions to download and execute installation scripts for security tools like TruffleHog directly via the shell (SKILL.md, references/secret-scanning.md). These tools are well-known industry standards for credential scanning.- [EXTERNAL_DOWNLOADS]: Fetches binary releases and configuration rules for Sops and Gitleaks from their official GitHub repositories (SKILL.md, references/secret-scanning.md).- [COMMAND_EXECUTION]: Employs administrative commands through sudo for tool installation, managing filesystem permissions (e.g., chmod 600), and performing security audits (SKILL.md, references/rotation-playbook.md).- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data by scanning external repositories and filesystems for leaked credentials (SKILL.md, references/secret-scanning.md).
Ingestion points: File and repository paths scanned by trufflehog, gitleaks, and detect-secrets (SKILL.md, references/secret-scanning.md).
Boundary markers: Explicit instructions to redact secret values and fingerprints in reporting (SKILL.md).
Capability inventory: Execution of CLI tools, filesystem write access for logs, and modification of file permissions (SKILL.md, references/rotation-playbook.md).
Sanitization: Verification requirements for rotations and redacted audit logs (SKILL.md).- [PERSISTENCE]: Suggests the implementation of scheduled filesystem scans via cron jobs to ensure ongoing secret hygiene (references/secret-scanning.md).

linux-secrets