enter-services
Fail
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: HIGHCREDENTIALS_UNSAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill instructs the agent to modify the user's
~/.ssh/configfile and references specific identity files such as~/.ssh/enter-services-shared-keyand~/.ssh/enter-services-staging-key. - [CREDENTIALS_UNSAFE]: Sensitive environment variables are decrypted using
sopsand temporarily stored in the/tmp/directory, which is a shared location that may pose risks in multi-user environments. - [COMMAND_EXECUTION]: The skill makes extensive use of
sudoto manage system services (systemctl), inspect system logs (journalctl), and install system-level packages viaapt-get. - [EXTERNAL_DOWNLOADS]: The skill clones the project repository from an external GitHub URL and installs dependencies using
npmandhomebrew.
Recommendations
- AI detected serious security threats
Audit Metadata