net-ops
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill heavily utilizes native OS command-line tools (such as
scutil,resolvectl,ip,ifconfig, and PowerShell cmdlets likeGet-DnsClientNrptRule) to audit network and resolver states. This is a core requirement for its diagnostic purpose. - [REMOTE_CODE_EXECUTION]: The
ssh-bootstrap.shscript and the skill's documentation provide patterns for executing diagnostic scripts on remote machines over SSH. This includes using Base64-encoded PowerShell strings to ensure command integrity across different shell environments. - [EXTERNAL_DOWNLOADS]: The diagnostic ladder includes tests that use
curlorInvoke-WebRequestto verify application-layer connectivity by reaching out to well-known, trusted domains likegoogle.comandgithub.com. - [CREDENTIALS_UNSAFE]: The skill facilitates remote access using
sshpass. While it avoids exposing passwords in process arguments by reading from standard input and using environment variables, users should manage the entry of these credentials securely. - [DATA_EXPOSURE]: The diagnostic scripts collect sensitive system configuration data. However, the
probescripts include a--redactfeature that uses regular expressions to mask private IP addresses and MAC addresses, protecting user privacy in the diagnostic output.
Audit Metadata