aegis-firewall-edge
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill requires administrative (root) access to inspect and modify firewall configurations including nftables, iptables, ufw, and firewalld. While necessary for the stated purpose, this provides the agent with high-level system control.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from system listeners and firewall rulesets which could theoretically be manipulated by a local attacker to influence agent behavior. 1. Ingestion points: The agent reads output from system tools such as
ss,nft,iptables,ufw, anddockerinSKILL.md. 2. Boundary markers: The instructions do not define specific delimiters for separating tool output from agent instructions. 3. Capability inventory: The skill performs shell command execution, file writing for remediation scripts, and network probing. 4. Sanitization: No explicit sanitization or filtering of external tool output is performed before processing. - [COMMAND_EXECUTION]: The skill relies heavily on executing shell commands to audit the host's security posture and apply remediation rules.
- [EXTERNAL_DOWNLOADS]: The skill references external documentation and utility repositories, such as
ufw-dockeron GitHub, for additional hardening steps.
Audit Metadata