The Agent Skills Directory

[Data Exposure & Exfiltration] (HIGH): The script scripts/log_analyzer.sh targets /var/log/syslog. System logs are sensitive files that often contain information about system architecture, user activities, and potentially leaked credentials or PII from failing processes.
[Indirect Prompt Injection] (HIGH): This skill exhibits a classic indirect injection surface.
Ingestion points: scripts/log_analyzer.sh (line 6) reads raw content from system log files.
Boundary markers: Absent. The script outputs raw log lines directly to the agent's context without delimiters or instructions to ignore embedded commands.
Capability inventory: Per SKILL.md, this is a PRIMARY_BOND for monitoring agents. Such agents typically have the capability to generate alerts, modify system states, or execute recovery commands based on log analysis.
Sanitization: Absent. There is no filtering of log content to remove potential injection strings.
[Command Execution] (MEDIUM): The script scripts/log_analyzer.sh (line 3) accepts an unvalidated file path as a command-line argument. While the script itself is simple, an agent could be manipulated into reading arbitrary sensitive files (e.g., /etc/passwd) by passing a different path to this parameter.

logging