The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides instructions to download and execute installation scripts (install.sh and install.ps1) directly from the vendor's official GitHub repository (github.com/ucloud/ucloud-sandbox-cli). These operations are used to set up the necessary command-line interface in the user's local environment.
[REMOTE_CODE_EXECUTION]: The core functionality of the skill relies on ucloud-sandbox-cli sandbox exec, which allows the agent to execute shell commands within a remote Linux-based sandbox. While this involves arbitrary command execution, it is the primary intended purpose of the tool and is scoped to the specific sandbox environment identified by the user's connection key.
[DATA_EXPOSURE]: The skill handles 'site connection keys' which serve as credentials for sandbox access. It implements several mitigations to prevent accidental exposure: it instructs the agent not to log or store these keys in configuration files, uses temporary environment variables for execution, and provides a specific awk script to mask sensitive values (e.g., variables containing API_KEY or KEY) when reading environment configuration files.
[INDIRECT_PROMPT_INJECTION]: The skill processes external inputs such as user-provided connection keys and local project files.
Ingestion points: Connection keys provided via prompts; local project directories for deployment.
Boundary markers: Use of case statements for key format validation; PowerShell here-strings for command isolation.
Capability inventory: Full file system access (fs cp, fs rm) and arbitrary command execution (sandbox exec) within the target sandbox.
Sanitization: Inclusion of a desensitization routine for environment variables and specific instructions to avoid outputting sensitive values.
[PRIVILEGE_ESCALATION]: The instructions describe the use of sudo -n within the remote sandbox to bind privleged ports (like port 80) and install system dependencies. This is standard for the described use case and is limited to the sandbox environment rather than the host machine.

ucloud-sandbox-site