linux-hardening
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various system commands through shell scripts to perform audits and apply security settings. This includes the use of
apt-get,ufw,iptables, andsysctlto manage system state and network security. - [PRIVILEGE_ESCALATION]: The hardening and auditing scripts require administrative privileges to access and modify sensitive system files, such as
/etc/shadow,/etc/ssh/sshd_config, and various kernel parameters. These operations are necessary for the primary function of server hardening. - [DYNAMIC_EXECUTION]: The
scripts/harden-system.shscript utilizes anevalcommand within a wrapper function (apply_change) to execute system modifications. Although the inputs to this function are hardcoded within the script's logic, the pattern of evaluating string arguments as shell commands is a dynamic execution technique.
Audit Metadata