orchestrator-mgmt
Warn
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides an interface to define and execute arbitrary system commands via the
commandandargsfields in the script configuration. Theadd scriptandstart <name>functionalities allow for the execution of any binary or script available on the host system. - [REMOTE_CODE_EXECUTION]: By allowing the registration of new scripts with custom commands, the skill can be used to execute payloads downloaded from external sources (e.g., via
curlorwgetcommands provided in theargs). - [DATA_EXFILTRATION]: The
logs <name>command enables viewing the last 500 lines of stdout and stderr from any managed process. This capability could be used to harvest sensitive information, credentials, or environment data emitted by processes into their logs.
Audit Metadata