The Agent Skills Directory

[SAFE]: The skill's primary purpose is digital forensics and incident response. It provides standard investigative procedures and scripts to parse Linux log files.
[COMMAND_EXECUTION]: Static analysis identified destructive command strings (e.g., 'rm -rf /'). Analysis confirms these are used as regex patterns within the command history detection engine to identify malicious actions by attackers, not as instructions to be executed by the agent.
[REMOTE_CODE_EXECUTION]: The script agent.py contains regex patterns for detecting remote code execution (e.g., 'curl | bash') in log files. These are part of its forensic analysis capabilities and do not represent execution of remote code by the skill itself.
[DATA_EXFILTRATION]: No network access or data transmission patterns were found. All processing is performed locally on log files, with results printed to standard output or saved to local JSON files.

performing-linux-log-forensics-investigation