The Agent Skills Directory

[COMMAND_EXECUTION]: The skill performs mass file deletions in user application data directories using PowerShell. It specifically leverages the Microsoft.VisualBasic.FileIO.FileSystem namespace to move directories and files to the Recycle Bin, a technique that operates outside standard shell commands.
[INDIRECT_PROMPT_INJECTION]: The skill ingests data from external product.json files to dynamically determine deletion paths. This dependency on untrusted local file content to define the scope of destructive operations creates a vulnerability surface for path traversal or targeting unintended directories. * Ingestion points: The dataFolderName and nameLong fields from product.json. * Boundary markers: Absent in technical implementation; relies on agent-side verification steps. * Capability inventory: PowerShell file/directory deletion, shell path exploration, and configuration overwriting. * Sanitization: Employs grep for value extraction, but lacks robust escaping for the resulting variables when used in subsequent PowerShell command strings.
[PRIVILEGE_ESCALATION]: The instructions direct the agent to modify system-level environment variables (e.g., $env:APPDATA) and perform operations that fundamentally alter the state of installed software and user profiles.

factory-reset-vscode-fork-ide