The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The file references/chaos-tools.md contains a Python implementation of a GremlinClient with hardcoded placeholders for sensitive credentials (api_key="...", team_id="..."). While these are currently placeholders, the skill encourages direct inclusion of API keys in scripts rather than using environment variables or secret managers.- [COMMAND_EXECUTION]: The skill provides numerous scripts for destructive infrastructure operations, including:
A Bash script in references/chaos-tools.md that uses the AWS CLI (aws ec2 terminate-instances) to randomly terminate a percentage of running instances in an Auto Scaling Group.
Python and Shell scripts in references/kubernetes-chaos.md that use the Kubernetes API to programmatically cordon and drain nodes, evicting all running pods.
Scripts in references/infrastructure-chaos.md that use sudo to install and run stress-ng and modify /etc/hosts to block DNS resolution.- [DATA_EXFILTRATION]: The GremlinClient in references/chaos-tools.md is designed to send target metadata (host IDs, container IDs) to api.gremlin.com. While this is the intended function of the tool, the integration lacks sanitization, potentially exposing internal infrastructure identifiers to a third-party service.

chaos-engineer