The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/agent.py uses the subprocess module to interact with the system environment.
It executes opencanaryd --start and opencanaryd --status to manage the honeypot daemon.
These operations are restricted to the OpenCanary binary and are consistent with the tool's management functions.
[EXTERNAL_DOWNLOADS]: The documentation in references/api-reference.md contains instructions for fetching established security software.
It references standard package installation via pip and container image retrieval from Docker Hub for the OpenCanary and Cowrie projects.
These represent well-known technology resources within the cybersecurity community.
[DATA_EXFILTRATION]: While the script processes sensitive data, such as credentials captured by the honeypot (usernames and passwords), it does so to generate local reports for threat intelligence.
The analysis logic in analyze_interactions summarizes this data locally and saves it to honeypot_report.json.
No unauthorized network transmission of this data was detected.

implementing-network-deception-with-honeypots