arch-linux-triage
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to generate administrative commands for Arch Linux management, including
pacman,systemctl, andjournalctl. While these are legitimate tools for the stated purpose, they require high privileges and should be reviewed by the user before execution. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data through the
ArchSnapshotandProblemSummaryinputs to generate remediation plans. This creates a surface where malicious instructions embedded in system logs or problem descriptions could influence the agent's output. - Ingestion points: Processes user-provided data via
${input:ArchSnapshot}and${input:ProblemSummary}inSKILL.md. - Boundary markers: None present in the instructions to delimit untrusted input.
- Capability inventory: Instructs the agent to generate shell commands for system modification and package management.
- Sanitization: No explicit sanitization or validation of the input content is defined.
Audit Metadata