tailnet-multi-machine

Warn

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill is designed to enable arbitrary code execution across a network of machines using SSH, SCP, and rsync. It provides templates for running complex bash scripts and deploying files to remote targets.
  • [COMMAND_EXECUTION]: Instructs the agent to bypass SSH security protocols by automatically accepting host keys (StrictHostKeyChecking=accept-new) and clearing existing host keys (ssh-keygen -R). This can expose the system to man-in-the-middle attacks if the network is compromised.
  • [COMMAND_EXECUTION]: Provides instructions for establishing persistence on remote machines through the creation of systemd user services and the use of loginctl enable-linger, allowing processes to run indefinitely without an active user session.
  • [COMMAND_EXECUTION]: Directs the agent to perform administrative tasks such as package installation (pacman, apt, brew) and system configuration edits across multiple hosts.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 14, 2026, 06:19 PM
Security Audit — agent-trust-hub — tailnet-multi-machine