The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The documentation in SKILL.md and references/install.md directs users to install the tool using curl https://rclone.org/install.sh | sudo bash. Piped execution of remote scripts is a high-risk vector for arbitrary code execution on the host system.
[PRIVILEGE_ESCALATION]: The skill frequently recommends the use of sudo for installation and configuration, as seen in SKILL.md and the provided scripts/install.sh. This provides the skill and its associated commands with a path to modify system-level binaries and directories.
[EXTERNAL_DOWNLOADS]: The scripts/install.sh script downloads binaries and version metadata from various subdomains of rclone.org. As these domains are not in the predefined list of trusted vendors, they are treated as potentially untrusted sources for runtime assets.
[DATA_EXFILTRATION]: The skill provides comprehensive instructions for moving data to over 70 cloud providers. It includes features for syncing local directories and serving files over protocols like HTTP, SFTP, and WebDAV. These capabilities present a significant surface for data exfiltration if the agent is misused to target sensitive files such as SSH keys or environment configuration files, which are explicitly mentioned in the documentation.
[MALICIOUS_URLS]: Automated scanners identified several URLs in the reference material as malicious, including phishing alerts for myfiles.customdomain.com, br-gru-1.linodeobjects.com, and us-iad-10.linodeobjects.com, as well as blacklisted endpoints like storage.iran.liara.space and s3.ir-tbz-sh1.arvanstorage.ir.

rclone-cli