arch-linux-cachyos
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous shell commands for system maintenance, including package management (
pacman), kernel initramfs generation (mkinitcpio), and bootloader updates (limine-update). It also includes commands for managing systemd user services and querying hardware state via/sysandqdbus. - [PRIVILEGE_ESCALATION]: Numerous commands require administrative privileges via
sudo, particularly for kernel installation/removal and bootloader configuration. The skill specifies that while the AI agent should not invokesudodirectly, the underlying scripts it runs should usesudointernally to perform root-level operations. - [EXTERNAL_DOWNLOADS]: The skill references external URLs for documentation and validation purposes, including the Arch Linux and CachyOS wikis, kernel.org, and official repositories on GitHub and Codeberg. These references are used to ensure administrative actions are consistent with current technical guidelines and official man pages.
- [INDIRECT_PROMPT_INJECTION]: As an administrative tool, the skill provides a surface for executing powerful system commands based on user input. It mitigates this risk by instructing the agent to verify all actions against official sources and binaries on disk, rather than relying solely on its internal training data.
Audit Metadata