process-management
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides functionality for monitoring and managing system processes and services. It includes critical safety protocols, such as a list of protected processes (init, systemd, sshd) that must never be terminated and a requirement to attempt graceful termination (SIGTERM) before force killing (SIGKILL).
- [PROMPT_INJECTION]: An indirect prompt injection surface is present where the skill reads system process metadata. Ingestion points: Process data retrieved via
list_processesandget_process_infoin SKILL.md. Boundary markers: No explicit delimiters are defined for process metadata. Capability inventory: Command execution viaos.killand service management viasystemctlin SKILL.md. Sanitization: The provided implementation snippets use Process IDs (PIDs) for targeting processes, which avoids shell-based command injection vulnerabilities during termination.
Audit Metadata