The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides instructions for executing system commands that require elevated privileges (sudo). This includes installing system packages, modifying kernel parameters via sysctl, and configuring the system firewall (ufw). These operations are consistent with the skill's primary purpose of server hardening.
[EXTERNAL_DOWNLOADS]: The skill utilizes the standard system package manager (apt) to fetch and install well-known security utilities such as auditd and libpam-pwquality. These are legitimate system dependencies for the stated security tasks.
[INDIRECT_PROMPT_INJECTION]: The skill includes instructions to perform system discovery using find and which commands. The output of these commands, which may include untrusted file metadata or paths from the target system, is ingested by the agent.
Ingestion points: Output from find and which commands in SKILL.md.
Boundary markers: Not explicitly defined in the provided commands, though the text emphasizes manual inventory and read-only steps first.
Capability inventory: Package installation, firewall modification, and writing to system configuration files in /etc/.
Sanitization: The instructions recommend manual validation and review of changes before application, which serves as a procedural control for sanitization.

linux-hardening