git-ssh-custom-host
Fail
Audited by Gen Agent Trust Hub on Apr 25, 2026
Risk Level: HIGHCOMMAND_EXECUTIONCREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
sudo tee -a /etc/hoststo modify system host files, which involves privilege escalation and modification of sensitive system configurations. - [COMMAND_EXECUTION]: User-provided input for the Git host, port, and username is directly interpolated into shell commands (including
nc,ssh, andgit) and file writing operations without any escaping or validation, posing a risk of command injection. - [CREDENTIALS_UNSAFE]: The skill reads and writes to
~/.ssh/configand creates new SSH keys; these are sensitive security credentials that should be managed with caution. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through its ingestion of untrusted user-supplied data. Ingestion points: user inputs for host details in SKILL.md. Boundary markers: none present to separate user data from command templates. Capability inventory: system-level file access, network connectivity tools, and administrative privilege escalation via sudo. Sanitization: no input validation or sanitization is performed on the captured variables before use in executable contexts.
Recommendations
- AI detected serious security threats
Audit Metadata