net-ops

Pass

Audited by Gen Agent Trust Hub on Aug 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill heavily utilizes native OS command-line tools (such as scutil, resolvectl, ip, ifconfig, and PowerShell cmdlets like Get-DnsClientNrptRule) to audit network and resolver states. This is a core requirement for its diagnostic purpose.
  • [REMOTE_CODE_EXECUTION]: The ssh-bootstrap.sh script and the skill's documentation provide patterns for executing diagnostic scripts on remote machines over SSH. This includes using Base64-encoded PowerShell strings to ensure command integrity across different shell environments.
  • [EXTERNAL_DOWNLOADS]: The diagnostic ladder includes tests that use curl or Invoke-WebRequest to verify application-layer connectivity by reaching out to well-known, trusted domains like google.com and github.com.
  • [CREDENTIALS_UNSAFE]: The skill facilitates remote access using sshpass. While it avoids exposing passwords in process arguments by reading from standard input and using environment variables, users should manage the entry of these credentials securely.
  • [DATA_EXPOSURE]: The diagnostic scripts collect sensitive system configuration data. However, the probe scripts include a --redact feature that uses regular expressions to mask private IP addresses and MAC addresses, protecting user privacy in the diagnostic output.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 15, 2026, 09:42 PM
Security Audit — agent-trust-hub — net-ops