kasm-admin

Fail

Audited by Gen Agent Trust Hub on Apr 10, 2026

Risk Level: HIGHCOMMAND_EXECUTIONCREDENTIALS_UNSAFEDATA_EXFILTRATIONREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill makes extensive use of sudo docker exec to perform database queries and system updates directly on the KASM host. This includes the use of psql to modify the state of workspaces, users, and sessions in the kasm_db container. (Found in SKILL.md, references/bulk-operations.md, references/multi-agent-patterns.md)
  • [COMMAND_EXECUTION]: Provides instructions for executing administrative tasks on remote servers using ssh root@$SERVER, including resource monitoring and system health checks. (Found in references/capacity-planning.md)
  • [REMOTE_CODE_EXECUTION]: Utilizes KASM's docker_exec_config and first_launch mechanism to execute arbitrary shell commands with root privileges whenever a new workspace session starts. Examples include installing packages and modifying system configurations. (Found in references/bulk-operations.md, references/config-templates.md)
  • [COMMAND_EXECUTION]: Explicitly provides commands to grant passwordless sudo privileges to users within workspace containers by modifying /etc/sudoers.d/kasm-user. (Found in references/bulk-operations.md, references/config-templates.md)
  • [CREDENTIALS_UNSAFE]: The skill involves the management of highly sensitive credentials, including KASM API keys/secrets and cloud storage credentials (AWS/Backblaze B2) for persistent profile management. (Found in SKILL.md, references/backup-operations.md)
  • [DATA_EXFILTRATION]: Facilitates the synchronization and backup of user profile data and shared volumes to external cloud storage providers via rclone and KASM's native storage provider settings. (Found in references/backup-operations.md)
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Apr 10, 2026, 08:14 AM
Security Audit — agent-trust-hub — kasm-admin