edit-machine

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local shell script (scripts/add-machine.sh) by interpolating the user-provided <machine_name> directly into the command line. This creates a potential command injection vulnerability if the machine name contains shell metacharacters (e.g., ;, &&, or |).- [DYNAMIC_EXECUTION]: The instruction set requires the agent to navigate to a specific directory and execute a bash script locally to modify machine profiles at runtime.- [PRIVILEGE_ESCALATION]: The skill's primary function involves modifying machine metadata that includes sensitive parameters such as 'root access' status and SSH connectivity settings.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 05:15 PM
Security Audit — agent-trust-hub — edit-machine