jenkins-agent
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill describes the standard Jenkins process of downloading 'agent.jar' from a controller and executing it via Java. While flagged as remote code execution, this is the intended and documented behavior for bootstrapping a Jenkins node and follows official vendor recommendations.
- [COMMAND_EXECUTION]: The skill uses 'sudo' for administrative tasks such as creating the 'jenkins' user, configuring SSH directory permissions, and installing the Java Runtime Environment. These commands are necessary for system-level installation and are initiated by the user following the documentation.
- [COMMAND_EXECUTION]: A 'rm -rf' command is documented specifically for cleaning up old job workspaces within the agent's dedicated home directory. This is a routine maintenance task and does not target sensitive system or root directories.
- [PERSISTENCE]: The instructions include setting up 'systemd' services on Linux and 'LaunchAgents' on macOS to ensure the Jenkins agent remains connected across reboots. This is expected and required functionality for a CI/CD build agent.
- [PRIVILEGE_ESCALATION]: Mention of 'privileged: true' in Docker and Kubernetes configurations is documented as an optional requirement for specific use cases like Docker-in-Docker (DinD) builds, which is a common and standard configuration in technical CI/CD workflows.
Audit Metadata