linux-service-triage
Warn
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: MEDIUMPERSISTENCEPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [PERSISTENCE]: The skill documentation in
references/integration-ideas.mdsuggests establishing persistence by adding health-check and auto-heal scripts to the system'scrontab(e.g.,*/30 * * * * /home/aa/clawd/scripts/service-health-check.sh). - [PRIVILEGE_ESCALATION]: The instructions and reference files describe operations requiring elevated privileges, such as
systemctl restart,chmod,chown, andkill -9for service management and permission fixes, as seen inSKILL.mdandreferences/integration-ideas.md. - [COMMAND_EXECUTION]: The skill relies on executing a variety of shell commands for system diagnostics and triage, including
ss -ltnp,ps aux,dig,journalctl, andnginx -t, as documented inreferences/triage-commands.mdandSKILL.md. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes external, potentially untrusted data from system and service logs. 1. Ingestion points: The agent reads
journalctloutput and specific service log files like/var/log/nginx/error.log(referenced inSKILL.mdandreferences/triage-commands.md). 2. Boundary markers: Absent; there are no instructions to use specific delimiters or ignore instructions within the logs. 3. Capability inventory: The skill has access tosystemctl,chmod,chown,kill, andnginx -tfor applying fixes. 4. Sanitization: Absent; no content filtering or escaping is mentioned. - [DATA_EXFILTRATION]: In
references/integration-ideas.md, the skill suggests an integration where diagnostic information collected from system logs is sent to an external service (Feishu) using a dedicated automation script.
Audit Metadata