skills/autohandai/community-skills/implementing-syslog-centralization-with-rsyslog/Gen Agent Trust Hub
implementing-syslog-centralization-with-rsyslog
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/agent.pyscript utilizessubprocess.run()to executeopensslcommands for creating and signing TLS certificates. These calls are performed withoutshell=True, which mitigates direct shell injection risks, although the arguments are derived from user-provided input. - [COMMAND_EXECUTION]: The skill uses the
paramikolibrary inscripts/agent.pyto connect to remote hosts and executesystemctl restart rsyslog. This is an expected administrative function but involves remote command execution. - [PROMPT_INJECTION]: The script is susceptible to indirect configuration injection due to a lack of input sanitization when rendering rsyslog templates.
- Ingestion points: CLI arguments
--server-ipand--clientsinscripts/agent.pyare used directly in Jinja2 templates. - Boundary markers: None used to encapsulate interpolated variables in the configuration templates.
- Capability inventory: Local file writes, local subprocess execution (
openssl), and remote SSH command execution (systemctl) withinscripts/agent.py. - Sanitization: No validation or escaping is applied to the input strings before they are processed by the Jinja2 template engine.
Audit Metadata