The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill includes instructions to install the Homebrew package manager by downloading and executing a shell script directly from its official GitHub repository.
[EXTERNAL_DOWNLOADS]: Fetches a list of tracking and malware domains from a public repository (StevenBlack/hosts) to update the system hosts file. It also references external configurations for DNSCrypt and public resolvers.
[COMMAND_EXECUTION]: Makes extensive use of high-privilege commands via sudo to modify system-level configurations including user accounts, firewalls, audit policies, and disk encryption settings.
[DYNAMIC_EXECUTION]: Instructions describe how to generate and execute a local shell script (network-monitor.sh) to monitor established network connections in the background.
[INDIRECT_PROMPT_INJECTION]: The skill ingests external data (hosts blocklists and resolver lists) which represents a potential attack surface.
Ingestion points: SKILL.md contains curl commands fetching data from raw.githubusercontent.com.
Boundary markers: Not present.
Capability inventory: The skill utilizes powerful system utilities such as sudo, launchctl, defaults, and pfctl across multiple sections.
Sanitization: None identified for the downloaded host file content.

macos-security-privacy-hardening