The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The skill configures a new system user named deploy with passwordless sudo permissions, granting the user full administrative access without requiring a password.
[COMMAND_EXECUTION]: The deployer script, which acts as an SSH forced command handler, is designed to execute arbitrary input directly if it does not match a specific set of Git or restart commands. This provides a mechanism for users to bypass intended SSH restrictions and execute any shell command on the server.
[REMOTE_CODE_EXECUTION]: The skill fetches and executes the official Docker installation script from Docker's domain during the server configuration process.
[COMMAND_EXECUTION]: The skill performs automated high-privilege configuration on remote servers by piping shell scripts directly to a root shell via SSH.
[INDIRECT_PROMPT_INJECTION]: The skill establishes a deployment pipeline that automatically triggers Docker builds from code pushed to the server. This creates a vulnerability where malicious code in a repository (such as a malicious Dockerfile) could execute commands with the privileges of the Docker daemon during the build process.
Ingestion points: Git repositories on the remote server where code is pushed by users.
Boundary markers: None identified in the script descriptions.
Capability inventory: The skill provides access to the Docker daemon, arbitrary shell execution via the deployer handler, and full root access via passwordless sudo.
Sanitization: There is no validation or sanitization of repository content before the build process is triggered.

server-bootstrap