The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses sudo to perform system modifications, such as changing firewall states, adjusting power management settings, and disabling system services.
[PRIVILEGE_ESCALATION]: The instructions involve elevating privileges to create new system users, modify existing account permissions, and set firmware-level security settings.
[EXTERNAL_DOWNLOADS]: The skill fetches network configuration profiles from Cloudflare and Quad9, and retrieves a community-maintained hosts file from a GitHub repository.
[DATA_EXFILTRATION]: The skill provides instructions to output the contents of the macOS keychain using the security tool, which accesses all stored credentials and private certificates.
[PERSISTENCE]: The skill modifies system configuration files including /etc/hosts, /etc/pf.conf, and SSH service configurations, which persist across system reboots.
[INDIRECT_PROMPT_INJECTION]: The skill downloads an external file from a public repository and applies it to system configuration, creating a surface where untrusted data could influence system behavior.
Ingestion points: curl to GitHub for hosts file download in SKILL.md.
Boundary markers: None.
Capability inventory: Use of sudo, file system writes to /etc/, and system service restarts.
Sanitization: No validation of the downloaded file content is performed.

macos-security-hardening