The Agent Skills Directory

[COMMAND_EXECUTION]: The skill relies on the virtualmin binary to perform all certificate management actions. Commands are executed using sudo to ensure the necessary permissions for modifying system-wide configuration files and accessing sensitive certificate directories.
[PROMPT_INJECTION]: Several scripts, such as generate-cert.sh, pass user-supplied arguments directly to the underlying Virtualmin command. This creates a surface for indirect prompt injection where an agent or user could potentially provide malicious flags. However, this is consistent with the intended functionality of a system administration wrapper and is mitigated by the use of shell array expansion in the provided scripts.

virtualmin-ssl