The Agent Skills Directory

[DYNAMIC_EXECUTION]: The skill performs runtime code generation by populating C++ templates (assets/theif-main-template.cpp) with process-specific guards and payload commands. It then invokes MSBuild to compile these into functional proxy DLLs to facilitate COM hijacking tests.
[COMMAND_EXECUTION]: The skill executes numerous system-level and administrative commands. It uses logman to create ETW (Event Tracing for Windows) sessions for registry monitoring, msbuild for compilation, and tasklist to verify DLL loading. It also utilizes winget for toolchain installation.
[EXTERNAL_DOWNLOADS]: The initialization script (Initialize-ComHijackHost.ps1) fetches the Visual Studio Build Tools bootstrapper from Microsoft's official aka.ms domain. It also clones the Koppeling repository from GitHub, pinning it to a specific commit hash for integrity.
[INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted system data, such as process names and registry paths, and interpolates them directly into C++ source templates.
Ingestion points: Registry paths and process names captured via ETW registry traces in Watch-InProcServer32Misses.ps1.
Boundary markers: Absent; system data is interpolated directly into code strings.
Capability inventory: File system writes, administrative command execution (logman, msbuild), and registry modification.
Sanitization: Minimal backslash escaping for payload command strings; no validation for process names used in generated conditional logic.
[PRIVILEGE_ESCALATION]: The skill requires administrative privileges to function, specifically for starting kernel registry traces and installing system build tools. It also modifies user-level registry keys (HKCU\Software\Classes\CLSID) to perform hijacking tests, though it includes logic to restore the registry state after testing.

com-proxy-triage