oslog
Warn
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: MEDIUMPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: Use of sudo command for log collection. The skill specifies running 'sudo /usr/bin/log collect' which requires administrative permissions to capture system-wide logs.
- [COMMAND_EXECUTION]: Risk of command injection through unvalidated input. The skill constructs shell commands by interpolating variables like and into command strings (e.g., in /usr/bin/log show and ls commands) without providing instructions for sanitization or escaping.
- [INDIRECT_PROMPT_INJECTION]: Processing of untrusted log content. The skill reads from the system log store and external .logarchive files, creating a surface where malicious instructions embedded in log messages could be processed by the agent.
- Ingestion points: System logs and .logarchive files via /usr/bin/log (SKILL.md).
- Boundary markers: Absent.
- Capability inventory: Shell execution, file system access, and sudo privileges (SKILL.md).
- Sanitization: Absent.
Audit Metadata