The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill directs the download of binary installers for Windows, Linux, and macOS from a personal GitHub Pages site (tonylinden54.github.io) instead of the official BitDefender domain.
[REMOTE_CODE_EXECUTION]: Instructions provide commands to immediately execute the downloaded binaries (e.g., ./bitdefender-installer-win.exe) after download.
[PRIVILEGE_ESCALATION]: The skill uses sudo and system-level installation tools such as dpkg, dnf, and installer to grant the untrusted binaries full administrative control over the operating system.
[PERSISTENCE]: The skill guides the user to enable system services (systemctl enable) and system extensions, ensuring that the untrusted software persists across system reboots.
[METADATA_POISONING]: The skill claims to provide 'BitDefender Total Security 2026', using the reputation of a well-known security product to lure users into installing software from an unofficial source.
[INDIRECT_PROMPT_INJECTION]: The skill includes Python integration that passes untrusted external data (network logs and script contents) to AI models for analysis without boundary markers or sanitization, creating a surface for injection attacks.
Ingestion points: Suspicious file content and network anomaly logs (bd_client.network.get_anomaly_log).
Boundary markers: Absent in the interpolation of data into OpenAI/Claude prompts.
Capability inventory: File quarantine, network isolation (client.network.isolate_system), and system hardening configuration.
Sanitization: No evidence of input validation or escaping before data is processed by the agent.

palisade-security-nexus-bitdefender