gen-ssh-key
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell scripts (
scripts/gen-ssh-key.sh) to generate SSH keys using standard system tools likessh-keygenorputtygen. This is the core intended functionality and is performed safely using standard arguments. - [PRIVILEGE_ESCALATION]: The skill intentionally manages file permissions using
chmod 600for private keys andchmod 700for generated directories. These are standard security hardening measures for SSH credentials, not an escalation of privileges. - [DATA_EXPOSURE]: The skill is designed to prevent data exposure. It specifically instructs the agent to return only the public key content to the user and never print or transmit the private key. It also uses temporary files for passphrases instead of command-line arguments to prevent them from appearing in process lists.
- [INDIRECT_PROMPT_INJECTION]: The skill takes user input for the key name and comments. The script includes sanitization (refusing slashes or spaces in names) and shell-safe argument handling to prevent command injection.
Audit Metadata