The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses sudo extensively across all scripts to execute virtualmin CLI tools. This represents a high-privilege execution environment where any vulnerability in the scripts or the underlying platform could lead to full system compromise.
[COMMAND_EXECUTION]: In scripts/modify-scheduled-backup.sh, the script collects arbitrary arguments into an EXTRA_ARGS array and passes them directly to a sudo virtualmin command. While the script uses set -euo pipefail and array expansion, passing unvalidated user input directly to administrative commands is a potential command injection vector if the underlying CLI tool does not safely handle its own arguments.
[COMMAND_EXECUTION]: The scripts/backup-domain.sh and scripts/schedule-backup.sh scripts use mkdir -p and ls on user-provided destination paths with administrative privileges. This could be abused to interact with sensitive filesystem locations.

virtualmin-backup