rterm-gateway
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill enables the execution of arbitrary commands on remote targets through methods such as
terminal:writeandexec-winrm. This functionality is central to the skill's purpose as a remote management tool. - [EXTERNAL_DOWNLOADS]: The documentation contains a link to download a prebuilt binary of the
websocatutility from the author's GitHub repository (https://raw.githubusercontent.com/DrOlu/agent-tools/main/websocat.exe). - [REMOTE_CODE_EXECUTION]: The
agent:startTaskRPC methods allow an AI agent to autonomously plan and execute multi-step operations on remote systems. - [PROMPT_INJECTION]: The skill processes
userInputfrom WebSocket clients to drive agent tasks, representing an attack surface for indirect prompt injection. This risk is addressed by the RTerm backend's Command Policy engine and an AGT policy engine for governance. - [CREDENTIALS_UNSAFE]: The skill manages credentials via a secrets vault (
observability:secretsSet). Documentation and example scripts use the placeholderRTERM_SECRETS_MASTER_KEY=pwto demonstrate master key configuration.
Audit Metadata