The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the user to execute shell commands using tshark, wireshark, and tcpdump. These are standard tools for network analysis and the commands are used within their intended scope for debugging and forensics.
[PRIVILEGE_ESCALATION]: Several commands utilize sudo to perform network captures (e.g., sudo tshark -i eth0). This is a legitimate requirement for accessing network interfaces on most operating systems and is documented transparently for the user.
[DATA_EXPOSURE]: The skill demonstrates how to extract fields from packet captures (IPs, ports, HTTP hosts) and how to export objects (files) from unencrypted protocols like HTTP, FTP, and SMB. These are core functionalities of the tools described and are intended for authorized analysis of network traffic.

wireshark