sbh

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill implements commands for file deletion and system service installation to manage disk pressure. File Management: Commands like sbh clean and sbh emergency are used to delete artifacts and reclaim space. Persistence: The sbh install command configures the utility as a systemd or launchd service.
  • [EXTERNAL_DOWNLOADS]: The utility contains a command to fetch and apply software updates from external sources. Evidence: The sbh update command described in references/COMMANDS.md.
  • [PROMPT_INJECTION]: The skill processes untrusted filesystem metadata, creating a surface for indirect prompt injection. Ingestion points: File and directory names are read by sbh scan and sbh status in SKILL.md. Boundary markers: The utility supports JSON output via the --json flag to structure data. Capability inventory: The agent can perform deletions and service management based on the scanner's output. Sanitization: The provided documentation does not specify sanitization procedures for ingested filesystem metadata.
  • [DATA_EXFILTRATION]: The configuration allows for event notifications to be sent to a user-defined external endpoint. Evidence: The webhook.url setting in references/CONFIG.md allows the tool to send data to remote servers.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 05:23 PM
Security Audit — agent-trust-hub — sbh