The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The script scripts/upstream-project/scripts/cmd/common.sh uses curl --insecure and wget --no-check-certificate in the _download_raw_config function. This bypasses TLS/SSL certificate verification when downloading subscription configurations, which could allow an attacker to intercept or modify the data via a Man-in-the-Middle (MitM) attack.
[REMOTE_CODE_EXECUTION]: The installation process in scripts/upstream-project/scripts/preflight.sh downloads executable binaries (kernels, yq, and subconverter) from external GitHub repositories and installs them to the system path. The script does not perform cryptographic hash verification to ensure the integrity of these binaries before execution.
[PRIVILEGE_ESCALATION]: The skill uses sudo to install system-wide services and to enable 'Tun' mode, which involves low-level network interface management. It modifies protected directories such as /etc/systemd/system/ or /etc/init.d/ depending on the detected init system.
[PERSISTENCE]: The skill automatically configures persistence by installing system services and appending code to the user's shell configuration files (.bashrc, .zshrc, and Fish config). It also sets up cron jobs for automated subscription updates.
[DYNAMIC_EXECUTION]: The command wrappers use eval for dynamic function definition in Fish (scripts/upstream-project/scripts/cmd/clashctl.fish) and for dynamic variable resolution in Bash (scripts/upstream-project/scripts/cmd/clashctl.sh).
[COMMAND_EXECUTION]: The skill instructions direct the agent to clone a remote repository and execute an installation script (bash install.sh) which performs significant system-level changes.
[CREDENTIALS_UNSAFE]: The clashupgrade function in scripts/upstream-project/scripts/cmd/clashctl.sh sends the controller's authentication secret in an HTTP POST request to a potentially public IP address. This transmits the secret in plain text over the network, exposing it to interception if the controller is accessible over the internet.

clashctl-linux