system-admin

Fail

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches and executes the Netdata monitoring installation script from the official netdata.io domain.
  • [EXTERNAL_DOWNLOADS]: Downloads and executes the Node Version Manager (NVM) installation script from its public GitHub repository.
  • [COMMAND_EXECUTION]: Generates and executes extensive shell commands for system configuration, package management, and service orchestration.
  • [PRIVILEGE_ESCALATION]: Employs sudo for administrative operations including service management, security hardening, and filesystem modifications.
  • [PERSISTENCE]: Configures recurring backup tasks via cron and manages long-running application processes using systemd unit files.
  • [DYNAMIC_EXECUTION]: Assembles and writes shell scripts (such as backup.sh), Nginx site configurations, and system service definitions to the filesystem for runtime execution.
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: The skill ingests user-provided system data, including command outputs (df, free, ufw) and deployment requirements, which are used to generate administrative actions.
  • Boundary markers: No explicit delimiters or instructions are provided to the agent to treat external diagnostic data as untrusted content.
  • Capability inventory: The skill possesses extensive system capabilities, including full filesystem access, network operations, and high-privilege service control across SKILL.md and example scripts.
  • Sanitization: The instructions do not define methods for validating or escaping user-provided inputs before they are interpolated into administrative commands.
Recommendations
  • HIGH: Downloads and executes remote code from: https://my-netdata.io/kickstart.sh - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 29, 2026, 04:02 PM