The Agent Skills Directory

[COMMAND_EXECUTION]: The skill contains an extensive collection of OS command injection payloads for Linux and Windows systems. These include examples such as cat /etc/passwd, command chaining characters (;, &&, ||, |), and argument injection vectors for tools like Chrome, SSH, and psql.
[DATA_EXFILTRATION]: It documents methods for exfiltrating data through side channels. This includes time-based exfiltration using sleep commands and DNS-based exfiltration targeting services such as zhack.ca and interactsh.com.
[OBFUSCATION]: The skill provides detailed techniques for bypassing security filters. Evidence includes the use of the Internal Field Separator ($IFS), brace expansion ({cat,/etc/passwd}), hex encoding (\x2f...), and homoglyph-style attacks using fullwidth double quotes (U+FF02) to bypass shell escaping functions.
[REMOTE_CODE_EXECUTION]: The skill describes methodologies for achieving remote code execution through vulnerable application sinks. It references automated exploitation tools such as commix and provides payloads for shell substitution ($(...)) and backticks to execute arbitrary code.

payloads-cmdi