The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides instructions to execute commands with root privileges using sudo, including sudo tcpdump for packet capture and sudo iptables for firewall management.
[COMMAND_EXECUTION]: The skill directs the agent to modify the /etc/hosts system configuration file using sudo tee and sudo sed. Such modifications can redirect system-wide network traffic or be used for persistence.
[PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection by interpolating user-supplied hostnames and domains into shell commands without sanitization. Evidence Chain: 1. Ingestion points: User-provided hostnames, IP addresses, and domain lists (domains.txt) in SKILL.md. 2. Boundary markers: Absent. 3. Capability inventory: Execution of dig, curl, nc, tcpdump, and sudo across the skill. 4. Sanitization: No input validation or escaping instructions are provided for handling untrusted data.

dns-network