cyrus-setup-launch
Fail
Audited by Gen Agent Trust Hub on Apr 26, 2026
Risk Level: HIGHCOMMAND_EXECUTIONCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of
sudoto perform high-privilege system modifications. This includes writing service files to/etc/systemd/system/, enabling system-wide background processes, and executing administrative commands likesystemctl daemon-reloadandpm2 startup. - [COMMAND_EXECUTION]: The skill attempts to modify the system's root certificate trust store. On macOS, it uses
sudo security add-trusted-certto add a CA certificate to the System keychain, and on Linux, it copies certificates to/usr/local/share/ca-certificates/and runsupdate-ca-certificates. Modifying the root trust store is a highly sensitive operation that can facilitate Man-in-the-Middle (MitM) interceptions. - [CREDENTIALS_UNSAFE]: The skill programmatically accesses and parses sensitive environment files located at
~/.cyrus/.env. These files are identified as containing high-value secrets includingANTHROPIC_API_KEY,CLAUDE_CODE_OAUTH_TOKEN,SLACK_BOT_TOKEN, andLINEAR_CLIENT_ID. - [EXTERNAL_DOWNLOADS]: The skill facilitates the global installation of external software packages, specifically
pm2, via the Node.js package manager (npm install -g pm2).
Recommendations
- AI detected serious security threats
Audit Metadata