nm
Warn
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes scripts that execute shell commands to modify the host system state by installing packages and updating repositories across multiple platforms. In some cases, these commands are executed with elevated privileges.
- Evidence in
scripts/install.ps1: Usage ofsudo apt-get updateandsudo apt-get install -y nmto perform administrative tasks. - Evidence in
scripts/install.sh: Platform-specific package management commands includingapt-get,dnf,pacman, andapk. - [COMMAND_EXECUTION]: The skill provides instructions for the agent to modify file permissions on the local system.
- Evidence in
references/troubleshooting.md: Commandchmod +r input_filefor permission adjustment. - [EXTERNAL_DOWNLOADS]: The installation scripts automate the fetching of software from external system package repositories.
- [PROMPT_INJECTION]: The skill is designed to process and analyze binary files from external sources, which constitutes an indirect prompt injection surface if the data is maliciously crafted.
- Ingestion points: Input files passed to the
nmutility as described inSKILL.mdandreferences/cheatsheet.md. - Boundary markers: No explicit delimiters or warnings to ignore embedded instructions are provided in the command patterns.
- Capability inventory: The skill has access to shell execution, package management tools, and file permission modification.
- Sanitization: No sanitization or validation of the input binary content is performed before processing.
Audit Metadata