arch-linux-cachyos

Pass

Audited by Gen Agent Trust Hub on Sep 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides numerous shell commands for system maintenance, including package management (pacman), kernel initramfs generation (mkinitcpio), and bootloader updates (limine-update). It also includes commands for managing systemd user services and querying hardware state via /sys and qdbus.
  • [PRIVILEGE_ESCALATION]: Numerous commands require administrative privileges via sudo, particularly for kernel installation/removal and bootloader configuration. The skill specifies that while the AI agent should not invoke sudo directly, the underlying scripts it runs should use sudo internally to perform root-level operations.
  • [EXTERNAL_DOWNLOADS]: The skill references external URLs for documentation and validation purposes, including the Arch Linux and CachyOS wikis, kernel.org, and official repositories on GitHub and Codeberg. These references are used to ensure administrative actions are consistent with current technical guidelines and official man pages.
  • [INDIRECT_PROMPT_INJECTION]: As an administrative tool, the skill provides a surface for executing powerful system commands based on user input. It mitigates this risk by instructing the agent to verify all actions against official sources and binaries on disk, rather than relying solely on its internal training data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 8, 2026, 10:54 AM
Security Audit — agent-trust-hub — arch-linux-cachyos