Linux Production Shell Scripts
Warn
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: MEDIUMPRIVILEGE_ESCALATIONPERSISTENCEREMOTE_CODE_EXECUTIONCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill provides templates that explicitly use
sudofor package installation (apt-get) and service management (systemctl), and perform root-level user management (useradd,passwd,chage). - [PERSISTENCE]: The 'Task Scheduler' template in
SKILL.mdfacilitates persistence by programmatically adding entries to the system'scrontab. - [REMOTE_CODE_EXECUTION]: The 'Remote Script Execution' template in
SKILL.mduses SSH to pipe local script content into a remote shell (ssh "$remote_server" "bash -s" < "$remote_script"). - [CREDENTIALS_UNSAFE]: The 'Database Backup Script' in
SKILL.mdincludes templates with hardcoded credential variables (db_user,db_pass), which may encourage unsafe secret management. - [INDIRECT_PROMPT_INJECTION]: The skill contains templates for analyzing untrusted data from system logs (
/var/log/syslog) and web logs (/var/log/apache2/access.log). * Ingestion points:SKILL.md(Error Log Extractor, Web Server Log Analyzer) * Boundary markers: Absent * Capability inventory: Shell command execution, file system access, network operations (SSH, rsync) * Sanitization: Absent - [COMMAND_EXECUTION]: The skill provides templates for destructive operations such as directory synchronization (
rsync --delete) and automated file cleanup (find ... -exec rm), which could be dangerous if input paths are manipulated.
Audit Metadata