kasm-admin
Fail
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: HIGHCOMMAND_EXECUTIONCREDENTIALS_UNSAFEDATA_EXFILTRATIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of
sudo docker execto perform database queries and system updates directly on the KASM host. This includes the use ofpsqlto modify the state of workspaces, users, and sessions in thekasm_dbcontainer. (Found in SKILL.md, references/bulk-operations.md, references/multi-agent-patterns.md) - [COMMAND_EXECUTION]: Provides instructions for executing administrative tasks on remote servers using
ssh root@$SERVER, including resource monitoring and system health checks. (Found in references/capacity-planning.md) - [REMOTE_CODE_EXECUTION]: Utilizes KASM's
docker_exec_configandfirst_launchmechanism to execute arbitrary shell commands with root privileges whenever a new workspace session starts. Examples include installing packages and modifying system configurations. (Found in references/bulk-operations.md, references/config-templates.md) - [COMMAND_EXECUTION]: Explicitly provides commands to grant passwordless
sudoprivileges to users within workspace containers by modifying/etc/sudoers.d/kasm-user. (Found in references/bulk-operations.md, references/config-templates.md) - [CREDENTIALS_UNSAFE]: The skill involves the management of highly sensitive credentials, including KASM API keys/secrets and cloud storage credentials (AWS/Backblaze B2) for persistent profile management. (Found in SKILL.md, references/backup-operations.md)
- [DATA_EXFILTRATION]: Facilitates the synchronization and backup of user profile data and shared volumes to external cloud storage providers via
rcloneand KASM's native storage provider settings. (Found in references/backup-operations.md)
Recommendations
- AI detected serious security threats
Audit Metadata