ligolo-ng
Warn
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use administrative privileges through
sudoto perform low-level network configurations, such as creating TUN interfaces and modifying system routing tables. - Evidence (SKILL.md):
sudo ip tuntap add user $(whoami) mode tun ligolo - Evidence (SKILL.md):
sudo ip route add 10.200.1.0/24 dev ligolo - [COMMAND_EXECUTION]: Instructions involve the execution of local and remote binaries to establish network tunnels.
- Evidence (SKILL.md):
./proxy -selfcert -laddr 0.0.0.0:11601 - Evidence (SKILL.md):
./agent -connect 10.10.14.1:11601 -ignore-cert - [COMMAND_EXECUTION]: The skill documentation refers to maintaining access via persistence mechanisms and service installation.
- Evidence (SKILL.md):
agent persistence, Windows service install - [EXTERNAL_DOWNLOADS]: The skill references the acquisition of prebuilt binaries from GitHub's public releases.
- Evidence (SKILL.md):
Download prebuilt binaries from GitHub releases.
Audit Metadata