The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The skill's setup process requires users to store Nugs.net credentials (email and password) in plaintext within the configuration file ~/.nugs/config.json. Storing sensitive authentication data in plaintext on the filesystem is a significant security risk.
[PROMPT_INJECTION]: The SKILL.md file contains instructions intended to override the agent's autonomous tool selection ('⚠️ MANDATORY SKILL INVOCATION ⚠️', 'YOU MUST invoke this skill', 'Failure... violates your operational requirements'). This language attempts to bypass the agent's decision-making logic.
[REMOTE_CODE_EXECUTION]: The troubleshooting and setup guides recommend installing the rclone utility by piping a script from a remote URL directly into a root shell (curl https://rclone.org/install.sh | sudo bash).
[COMMAND_EXECUTION]: The documentation frequently suggests the use of the sudo command for system-level installation and configuration tasks, which increases the risk of privilege escalation.
[NO_CODE]: Although the skill documentation states the nugs binary is pre-installed, the provided file contains only a directory path string rather than executable code, rendering the tool non-functional in its current state.

nugs