The Agent Skills Directory

[COMMAND_EXECUTION]: The skill frequently executes shell and PowerShell commands to manage services, configure system settings, and interact with the PUDA CLI (e.g., puda login, puda init, puda skills install, docker compose up).
[PRIVILEGE_ESCALATION]: The clock synchronization scripts (sync-clock.sh and sync-clock.ps1) require elevated privileges (sudo on Linux, Administrator role on Windows) and use ExecutionPolicy Bypass to configure system-level time services. These actions are documented and necessary for the skill's stated purpose of disciplining host clocks.
[EXTERNAL_DOWNLOADS]: Fetches resources from the vendor's GitHub organization (github.com/PUDAP/livestream) and recommends downloading the PUDA CLI from the official releases page. These downloads are directed toward vendor-controlled infrastructure.
[INDIRECT_PROMPT_INJECTION]: The skill defines a surface for indirect prompt injection by ingesting user-provided inputs (NTP server IPs, NATS URLs, camera stream URLs) which are then interpolated into system configuration files (e.g., chrony.conf, streams.conf) and command arguments. The scripts perform basic validation (e.g., checking for host.docker.internal) but lack extensive sanitization for all interpolated values.

puda