Skills
skills/aradotso/devtools-skills/clicd-virtualization-panel/Gen Agent Trust Hub

clicd-virtualization-panel

Fail

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill instructs users to download a shell script from a remote URL and pipe it directly into a root shell (sudo sh), which allows for arbitrary code execution on the host system.
  • Evidence: curl -fsSL https://raw.githubusercontent.com/MengMengCode/CLICD/main/install.sh | sudo sh in SKILL.md.
  • [EXTERNAL_DOWNLOADS]: The skill fetches installation and uninstallation scripts from a third-party GitHub repository that is not associated with a trusted organization or the skill's author.
  • Evidence: https://raw.githubusercontent.com/MengMengCode/CLICD/main/install.sh.
  • [COMMAND_EXECUTION]: The skill relies on extensive use of administrative privileges to perform operations such as modifying kernel parameters, managing systemd services, and configuring firewall rules.
  • Evidence: Commands such as sudo systemctl, sudo journalctl, sudo sysctl, and sudo iptables are used throughout the documentation.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
CRITICAL
Analyzed
Jun 13, 2026, 10:04 AM
Security Audit — agent-trust-hub — clicd-virtualization-panel