add-machine
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local shell script located at
/home/daniel/repos/github/my-repos/Claude-Security-Auditor-Plugin/scripts/add-machine.sh. This path is hardcoded and assumes the presence of a specific repository on the host system. - [CREDENTIALS_UNSAFE]: The documentation explicitly mentions that storing machine credentials in plain text (via the
CLAUDE.mdfile) carries risks. It instructs the user to ensure tight file permissions, but the practice of plain-text credential storage is inherently risky. - [COMMAND_EXECUTION]: The skill performs SSH connectivity tests to remote machines based on user-provided aliases or connection strings, which involves initiating network connections from the local environment.
Audit Metadata