The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The skill uses sudo commands to install the trivy vulnerability scanner and its repository keys. This involves executing sudo apt-get install, sudo apt-key add, and sudo tee to modify system-level package manager configurations.
[EXTERNAL_DOWNLOADS]: The skill fetches the official repository key and package information for trivy from Aqua Security's infrastructure (aquasecurity.github.io).
[COMMAND_EXECUTION]: The skill executes various shell commands to detect project types and run audit tools. These include npm install --package-lock-only, npm audit, pip-audit, trivy fs, and several jq operations to parse audit results.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted project configuration files, creating a surface for potential instruction injection.
Ingestion points: Project manifest files including package.json, package-lock.json, yarn.lock, requirements.txt, Pipfile, pyproject.toml, go.mod, and Dockerfile from the path specified in SECSKILL_PROJECT_PATH.
Boundary markers: None. The content of these files is read and passed directly to audit tools or processed via shell commands without delimiters or instructions to ignore embedded commands.
Capability inventory: The skill has capabilities for file system writes (mkdir, output redirection), file system navigation (cd), and execution of multiple CLI tools.
Sanitization: There is no explicit sanitization of the data read from project files before it is processed by jq or included in the final summary report generated for the agent.

dependency-audit