auditing-cis-benchmark
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses various system commands such as
systemctl,ps,ls,grep, andopensslto audit service status, process isolation, and certificate metadata. - [COMMAND_EXECUTION]: Executes SQL commands including
SHOW CLUSTER SETTINGSand queries against system tables to audit database configurations, host-based authentication (HBA) rules, and user role memberships. - [EXTERNAL_DOWNLOADS]: Fetches SHA-256 checksums from the vendor's official repository (
binaries.cockroachdb.com) to verify binary integrity. - [SAFE]: Accesses system configuration paths (e.g.,
/etc/cockroach,/var/lib/cockroach/certs) and log files for the purpose of compliance auditing, matching the skill's stated intent. - [SAFE]: Utilizes the database setting
SET allow_unsafe_internals = trueto audit password hash formats. This is documented as a temporary, read-only audit procedure with explicit instructions to disable the setting immediately after use.
Audit Metadata