ops-speedup
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill utilizes platform-specific dynamic execution syntax (
!command) to run diagnostic probes (ops-speedup --scan) at load time. This is used to automatically populate the system health report and dashboard headers. - [COMMAND_EXECUTION]: The instructions direct the agent to execute a bundled binary (
bin/ops-speedup) with various flags. These commands perform high-impact operations including process termination, Docker volume pruning, file deletion (caches, logs, temporary files), and network configuration changes. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external local files, including
preferences.jsonandhistory.jsonl. - Ingestion points:
catandtailcommands are used to read plugin data and telemetry logs for rendering timestamps and trend graphs. - Boundary markers: Not explicitly defined in the file-read instructions, though the data is parsed as JSON or TSV.
- Capability inventory: The skill possesses extensive capabilities including shell command execution (
Bash), file system access, and system-level configuration changes. - Sanitization: The skill relies on
jqfor parsing structured data from logs before display. - [PRIVILEGE_ESCALATION]: The skill performs operations that typically require elevated system privileges, such as kernel tuning (
vnodes,somaxconn), flushing DNS caches, and modifying system startup items (launch-agents,systemdunits). Whilesudois not explicitly invoked in the instructions, these tasks represent high-privilege system modifications.
Audit Metadata