apt-repo-key-rotation

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFEPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The skill instructions utilize sudo to perform administrative actions such as writing to system directories (/etc/apt/keyrings/) and modifying file permissions. The agent is advised to hand these commands to the user for execution.
  • [COMMAND_EXECUTION]: The skill executes multiple shell commands to search for configuration paths, inspect GPG key metadata, and manage system package repositories.
  • [EXTERNAL_DOWNLOADS]: The skill fetches GPG signing keys from external vendor servers using curl to replace outdated or rotated signing keys.
  • [INDIRECT_PROMPT_INJECTION]: The skill reads and processes the output of files located in /etc/apt/sources.list.d/ to determine the correct keyring paths.
  • Ingestion points: Contents of APT source list files in /etc/apt/sources.list.d/ processed via rg (SKILL.md).
  • Boundary markers: No explicit delimiters are used for the external file contents.
  • Capability inventory: The skill uses curl for network requests and sudo tee/sudo chmod for system-level file operations (SKILL.md).
  • Sanitization: The skill provides a verification step using gpg --show-keys to allow the operator to check the key fingerprint before installation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 07:07 AM