over-permissioned
Fail
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: HIGHPRIVILEGE_ESCALATIONCREDENTIALS_UNSAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill explicitly instructs users to execute commands using
sudofor standard file management tasks inSKILL.mdand hardcodessudoinside thescripts/organize.shscript, which is a dangerous practice for a file organizer.\n- [CREDENTIALS_UNSAFE]: The skill documentation states a requirement to access~/.aws/credentials, which contains sensitive cloud authentication secrets.\n- [COMMAND_EXECUTION]: The skill utilizes thebashandexecute_commandtools to run scripts that perform system-wide searches and move files with elevated privileges.\n- [DATA_EXFILTRATION]: The skill targets sensitive data files including~/.ssh/known_hostsand/etc/passwdfor reading, which constitutes high-severity data exposure risk.
Recommendations
- AI detected serious security threats
Audit Metadata