The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill promotes cloning code from a third-party GitHub repository (Flowseal/tg-ws-proxy) and downloading binary files (.deb and executables) from unverified external release pages. These sources are not associated with the established vendor context.
[REMOTE_CODE_EXECUTION]: The skill provides instructions to download and execute code and binaries from untrusted sources, including using git clone followed by installation and running pre-compiled binary files.
[PRIVILEGE_ESCALATION]: Setup instructions require the use of sudo to install Debian packages and manage system services. Furthermore, the troubleshooting section explicitly instructs users to ignore security warnings and disable antivirus protections (Windows Defender) to facilitate installation.
[PERSISTENCE]: The skill provides configuration steps for a systemd service (tg-ws-proxy-cli@1080), enabling the software to automatically start and maintain persistence across system reboots.
[COMMAND_EXECUTION]: Instructions include granting execution permissions to downloaded binaries using chmod +x and provide Python examples for launching external processes via subprocess.Popen.
[INDIRECT_PROMPT_INJECTION]:\n
Ingestion points: The skill reads sensitive credentials from environment variables (TG_API_ID, TG_API_HASH) and platform-specific configuration files (config.json).\n
Boundary markers: No delimiters or instructions are provided to isolate untrusted configuration data from the execution environment.\n
Capability inventory: The skill possesses capabilities for subprocess execution, network communication, and system service manipulation.\n
Sanitization: There is no mention of input validation or sanitization for environment variables or local configuration data.

tg-ws-proxy-telegram-socks5