The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The skill requires the user to execute multiple commands with root privileges using sudo for tasks such as kernel module loading, network interface configuration, and package installation.
[EXTERNAL_DOWNLOADS]: Instructions include cloning a codebase from an unknown GitHub repository (https://github.com/zhu-zhu666/S800-Vehicle-Network-Security-Testing-Framework.git) and installing unversioned dependencies from a requirements.txt file.
[REMOTE_CODE_EXECUTION]: The skill establishes a pattern of downloading code from an unverified source and executing it on the local system through Python script calls.
[COMMAND_EXECUTION]: Multiple shell commands are used to configure hardware and run diagnostic tools, which could lead to unintended system changes.
[DATA_EXFILTRATION]: The framework includes capabilities to extract sensitive vehicle information, such as the Vehicle Identification Number (VIN) via UDS diagnostic queries. It also provides configuration for an environment variable (S800_API_URL) that could be used to exfiltrate analysis data to a remote endpoint.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from live vehicle networks and external PCAP files (ingestion points). It lacks explicit boundary markers or sanitization logic and possesses capabilities for shell, file, and network operations, creating a surface where malicious network traffic could potentially influence agent interpretation.

s800-vehicle-network-security-testing