The Agent Skills Directory

[DATA_EXFILTRATION]: The skill provides an example command using curl to perform a directory traversal attack specifically targeting the sensitive system file /etc/passwd.
[PRIVILEGE_ESCALATION]: The penetration testing workflow explicitly includes 'Privilege escalation' as a core phase of operation for security assessments.
[PERSISTENCE]: The skill documents 'Lateral movement' and persistence techniques within the post-exploitation phase, and the safety instructions reference commands that 'persist on' a target system.
[COMMAND_EXECUTION]: The skill contains numerous executable command templates for network scanning and vulnerability exploitation tools such as nmap, sqlmap, nikto, subfinder, and dirb.
[INDIRECT_PROMPT_INJECTION]: The skill defines a vulnerability surface where user-provided target data is interpolated directly into high-privilege shell commands.
Ingestion points: User-supplied target URLs, IP addresses, and resource names requested in the mandatory confirmation gate (SKILL.md).
Boundary markers: No specific delimiters or 'ignore embedded instructions' warnings are implemented within the command templates.
Capability inventory: The skill possesses significant capabilities including network operations (curl), database exploitation (sqlmap), and service scanning (nmap, nikto).
Sanitization: There is no evidence of automated validation or escaping for the target input before it is used in the command line templates.

penetration-testing