The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The skill instructs the agent to recommend adding the current user to the docker group using sudo usermod -aG docker $USER. On Linux systems, membership in the docker group is functionally equivalent to root access, as it allows users to run containers that can mount and modify any file on the host filesystem.
[PERSISTENCE]: The instructions suggest setting up a persistent scheduled task via cron (0 3 * * 0 docker image prune ...) to automate disk cleanup. While intended for maintenance, modifying crontabs is a method used to maintain persistence on a system.
[INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for ingesting and analyzing potentially untrusted data from external sources.
Ingestion points: The skill reads docker logs and container error messages to diagnose issues.
Boundary markers: No specific delimiters or instructions are provided to help the agent distinguish between diagnostic data and potentially malicious instructions embedded within logs.
Capability inventory: The skill has access to powerful system tools including sudo, docker management commands, and service control utilities (systemctl).
Sanitization: There are no requirements for the agent to sanitize or validate the content of container logs before processing them, which could allow a malicious log entry to influence agent behavior.

docker-troubleshooting