The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill implements a routine to download an opaque binary executable from https://github.com/zaydiscold/bird/releases/download/v0.8.0/bird to /tmp/bird, modifies its permissions with chmod +x, and moves it to ~/.local/bin/bird for execution.
[DATA_EXFILTRATION]: The instructions include logic to probe macOS Safari and Chrome browser profile directories for sensitive authentication tokens (auth_token and ct0). It searches for these credentials in tool output and persists them into a local configuration file at ~/.config/bird/config.json5.
[COMMAND_EXECUTION]: Executes shell commands to manage tool installation, verify binary availability, and modify the environment PATH. It also uses rg (ripgrep) to extract authentication tokens from temporary files.
[EXTERNAL_DOWNLOADS]: Fetches release assets from the author's GitHub repository rather than utilizing a verified package manager or standard system distribution channel.
[PROMPT_INJECTION]: The skill processes external data from Twitter/X (tweets, mentions, and search results), creating a surface for indirect prompt injection attacks.
Ingestion points: Data is ingested via bird read, bird thread, bird search, and bird mentions commands.
Boundary markers: None identified; external tweet content is handled as raw text without delimiters to differentiate data from instructions.
Capability inventory: The agent has access to the Bash tool to run the bird binary, which can perform network requests and modify the local filesystem.
Sanitization: Implements basic URL host normalization but does not perform sanitization on the body text of search results or tweets.

bird