spoof-suite-security-hardware
Fail
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the user to clone a repository from
https://github.com/Shantanu-U69/Spoof-Suite-Security.gitand executesudo ./install.sh. Running unverified installation scripts with administrative privileges is a high-risk activity that can lead to persistent system compromise. - [COMMAND_EXECUTION]: The skill uses several high-privilege system commands, including
sudo modprobefor kernel module manipulation andsudo setcapto grant raw network access (cap_net_raw,cap_net_admin) to its binaries, bypassing standard user-space restrictions. - [EXTERNAL_DOWNLOADS]: Fetches source code and system components from a GitHub account (
Shantanu-U69) that does not correspond to the skill author or a recognized trusted organization. - [PRIVILEGE_ESCALATION]: The documentation explicitly advises disabling critical security features, specifically macOS System Integrity Protection (SIP) and Linux SELinux via
sudo setenforce 0. Disabling these features removes essential security boundaries that protect the operating system kernel. - [COMMAND_EXECUTION]: Encourages the use of
systemctl enablefor thehardsp00fdservice, establishing persistent execution of the spoofing daemon across system reboots.
Recommendations
- AI detected serious security threats
Audit Metadata