Linux Production Shell Scripts
Warn
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides templates for executing high-privilege commands including package installation (sudo apt-get), service management (sudo systemctl), and user account creation (useradd).
- [COMMAND_EXECUTION]: Persistence mechanisms are facilitated through templates that modify the system crontab.
- [COMMAND_EXECUTION]: File system integrity is at risk through templates that perform recursive deletions (rm -r) in backup rotation and cleanup scripts.
- [REMOTE_CODE_EXECUTION]: A template is provided for executing scripts on remote servers via SSH (ssh user@host bash -s < script).
- [DATA_EXFILTRATION]: Templates facilitate the transfer of local directory contents to remote servers using rsync.
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface (Category 8) by ingesting untrusted data from log files. * Ingestion points: Phase 5 templates in SKILL.md reading from /var/log/syslog and /var/log/apache2/access.log. * Boundary markers: No delimiters or ignore-instructions markers are present in the provided templates. * Capability inventory: Subprocess execution via sudo, file deletion with rm, remote execution via ssh, and system persistence via crontab as seen in SKILL.md. * Sanitization: No input validation or sanitization is performed on the ingested log content.
Audit Metadata