edit-machine
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local shell script (
scripts/add-machine.sh) by interpolating the user-provided<machine_name>directly into the command line. This creates a potential command injection vulnerability if the machine name contains shell metacharacters (e.g.,;,&&, or|).- [DYNAMIC_EXECUTION]: The instruction set requires the agent to navigate to a specific directory and execute a bash script locally to modify machine profiles at runtime.- [PRIVILEGE_ESCALATION]: The skill's primary function involves modifying machine metadata that includes sensitive parameters such as 'root access' status and SSH connectivity settings.
Audit Metadata