sbh
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill implements commands for file deletion and system service installation to manage disk pressure. File Management: Commands like
sbh cleanandsbh emergencyare used to delete artifacts and reclaim space. Persistence: Thesbh installcommand configures the utility as a systemd or launchd service. - [EXTERNAL_DOWNLOADS]: The utility contains a command to fetch and apply software updates from external sources. Evidence: The
sbh updatecommand described inreferences/COMMANDS.md. - [PROMPT_INJECTION]: The skill processes untrusted filesystem metadata, creating a surface for indirect prompt injection. Ingestion points: File and directory names are read by
sbh scanandsbh statusinSKILL.md. Boundary markers: The utility supports JSON output via the--jsonflag to structure data. Capability inventory: The agent can perform deletions and service management based on the scanner's output. Sanitization: The provided documentation does not specify sanitization procedures for ingested filesystem metadata. - [DATA_EXFILTRATION]: The configuration allows for event notifications to be sent to a user-defined external endpoint. Evidence: The
webhook.urlsetting inreferences/CONFIG.mdallows the tool to send data to remote servers.
Audit Metadata