The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The skill explicitly prompts users for sensitive SSH credentials, including passwords. It utilizes sshpass -p 'PASSWORD', which is a high-risk practice because passwords provided as command-line arguments can be exposed in process lists, shell history, and logs.
[COMMAND_EXECUTION]: The skill executes a wide range of administrative commands on the remote server via SSH, including docker, mkdir, chown, chmod, cp, and rm. These commands are used to modify system directories and manage containers.
[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8). It ingests untrusted user inputs (such as project names, service names, and database names) and interpolates them directly into shell commands executed on the remote server.
Ingestion points: User-provided variables in 'Paso 1' (SKILL.md).
Boundary markers: Absent; inputs are directly embedded into shell strings.
Capability inventory: Remote shell execution via SSH/SCP with sudo privileges.
Sanitization: None; there is no validation to prevent shell metacharacters like ;, &&, or | from being included in the variables.
[EXTERNAL_DOWNLOADS]: The skill downloads Docker images from external registries. This includes official images for mysql and postgres, as well as custom images from the author's repository (webcomunica/php-mysql-custom). These downloads are consistent with the skill's stated purpose of deploying web services.
[PRIVILEGE_ESCALATION]: The skill extensively uses sudo to perform operations that require root privileges on the target server, such as modifying files in /etc/easypanel/ and changing file ownership to the www-data user (UID 33).

deploy-web-easypanel