The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill fetches the official NextDNS installer script from https://nextdns.io/install. This is the standard deployment method provided by the service for its CLI agent.
[COMMAND_EXECUTION]: Utilizes sudo for administrative tasks such as modifying /etc/systemd/resolved.conf and installing the NextDNS service agent, which is necessary for changing system-level network configurations.
[DATA_EXFILTRATION]: Communicates with the official NextDNS REST API (api.nextdns.io) to retrieve account profile settings and DNS query logs for auditing purposes.
[PROMPT_INJECTION]: The skill processes untrusted DNS log data, creating an indirect prompt injection surface.\n
Ingestion points: DNS query logs retrieved from the API in agent.py and sample logs in process.py.\n
Boundary markers: Absent from log processing logic.\n
Capability inventory: Includes system-level configuration commands and script execution capabilities.\n
Sanitization: No validation or escaping is performed on external domain names from the logs before they are processed or displayed.

implementing-zero-trust-dns-with-nextdns