spoof-suite-hardware-identity
Fail
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches source code and binary assets from personal GitHub and GitHub Pages accounts (Shantanu-U69). These sources are not verified or affiliated with the skill stated author or trusted organizations.
- [REMOTE_CODE_EXECUTION]: Installation steps involve compiling and loading a kernel module (sudo modprobe) and installing Windows drivers from the untrusted remote source. This execution path grants the downloaded software the highest possible level of system privilege.
- [COMMAND_EXECUTION]: Numerous operational commands require sudo for tasks like daemon management and network interface manipulation. This creates an extensive attack surface where malicious instructions in the downloaded repository could execute as root.
- [PROMPT_INJECTION]: The skill incorporates a system for generating and loading YAML profiles, including an AI-integrated generation feature. This constitutes an indirect prompt injection surface.
- Ingestion points: YAML profile loading via hardsp00fd --profile in SKILL.md.
- Boundary markers: None present; profiles are parsed and applied directly to system components.
- Capability inventory: Kernel module loading, DNS rotation, MAC spoofing, and driver installation as documented in SKILL.md.
- Sanitization: No evidence of validation or content sanitization for the generated profiles or AI-derived output.
Recommendations
- AI detected serious security threats
Audit Metadata