setting-up-agent-relay-desktop
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a wide range of shell commands to perform system discovery (uname, dpkg-query), manipulate configuration files (sed, jq), and manage services (systemctl, launchctl).
- [EXTERNAL_DOWNLOADS]: Fetches installation binaries (.deb, .tar.gz, .dmg) and corresponding SHA-256 checksum files from the developer's GitHub repository.
- [REMOTE_CODE_EXECUTION]: Installs and runs executable code downloaded from the internet. The risk is mitigated by performing mandatory integrity checks using
sha256sumorshasumbefore execution or installation. - [PRIVILEGE_ESCALATION]: Uses
sudoto perform administrative tasks, including installing system packages viaapt-get, enabling user lingering withloginctl, and copying application files to/Applicationson macOS usingditto. - [PERSISTENCE]: Configures systemd user units on Linux and potentially interacts with launchd on macOS to ensure the application remains active and starts automatically upon user login.
Audit Metadata