The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill fetches an installation script from the official GitHub repository of Aqua Security (https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh) and executes it using the shell. This process is intended to install the trivy binary required for the skill's primary function.
[INDIRECT_PROMPT_INJECTION]: The skill interacts with external data by scanning local source code and analyzing HTTP responses from a target host.
Ingestion points: Local files via trivy fs and network responses via curl.
Capability inventory: Shell access for executing trivy, curl, dig, and python3 scripts.
Boundary markers: The instructions do not define specific delimiters for separating scanned data from agent instructions.
Sanitization: No explicit sanitization or filtering of the scanned content is described.
[COMMAND_EXECUTION]: The skill relies on various system commands to perform its security auditing tasks. This includes running the trivy scanner for vulnerability detection, curl for verifying authentication logic on remote hosts, and dig for checking DNS configurations. These commands are aligned with the skill's stated purpose as a security tool.

orca-sec-scans