sbh
Fail
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: HIGHCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill enables an agent to execute high-impact commands through the 'sbh' utility, including destructive flags like 'clean --yes' and 'emergency --yes' for file deletion, and 'tune --apply' for modifying system-level storage configurations. These actions carry a high risk of accidental data loss or system instability.
- [EXTERNAL_DOWNLOADS]: The skill references and directs the agent to a non-standard third-party repository (github.com/Dicklesworthstone/storage_ballast_helper) for the 'sbh' tool. The use of system utilities from unverified external sources introduces significant supply chain risk.
- [PRIVILEGE_ESCALATION]: The metadata for this skill explicitly includes the capability to 'modify_host_storage_config', which typically requires administrative or root-level privileges. The skill facilitates these privileged operations on the host environment.
Recommendations
- AI detected serious security threats
Audit Metadata