tar
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill primarily operates by executing the system 'tar' utility and using platform-specific package managers such as 'apt', 'dnf', 'pacman', 'apk', and 'Chocolatey' for installation and archive management.
- [SAFE]: The documentation includes robust security guardrails for handling untrusted archives, specifically instructing the agent to list contents ('tar -tf') and validate paths using grep to detect and prevent directory traversal (e.g., '../') or absolute path attacks.
- [COMMAND_EXECUTION]: The 'references/troubleshooting.md' file includes an instruction to use 'chmod 777' on a temporary directory path ('/tmp/safe') to resolve permission-denied errors during extraction. While this is a broad permission setting, it is localized to a troubleshooting context for temporary directories and does not pose a systemic risk.
- [SAFE]: All external references and documentation links point to official and trusted sources, including GNU.org and the Open Group POSIX standards.
Audit Metadata