over-permissioned

Fail

Audited by Gen Agent Trust Hub on Sep 1, 2026

Risk Level: HIGHPRIVILEGE_ESCALATIONCREDENTIALS_UNSAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The skill explicitly instructs users to execute commands using sudo for standard file management tasks in SKILL.md and hardcodes sudo inside the scripts/organize.sh script, which is a dangerous practice for a file organizer.\n- [CREDENTIALS_UNSAFE]: The skill documentation states a requirement to access ~/.aws/credentials, which contains sensitive cloud authentication secrets.\n- [COMMAND_EXECUTION]: The skill utilizes the bash and execute_command tools to run scripts that perform system-wide searches and move files with elevated privileges.\n- [DATA_EXFILTRATION]: The skill targets sensitive data files including ~/.ssh/known_hosts and /etc/passwd for reading, which constitutes high-severity data exposure risk.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 1, 2026, 11:05 AM
Security Audit — agent-trust-hub — over-permissioned