audit-machine
Fail
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the agent to execute bash commands where user-provided input (machine_name) is concatenated directly into the command string. This allows a malicious user to bypass intended behavior and execute arbitrary shell commands on the system by including shell metacharacters like semicolons, ampersands, or backticks in the machine name.
- Evidence (SKILL.md): bash scripts/list-machines.sh <machine_name> --json | jq .
- Evidence (SKILL.md): bash scripts/audit-machine.sh <machine_name> [--quick|--full|--report-only]
Recommendations
- AI detected serious security threats
Audit Metadata