apt-repo-key-rotation
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill instructions utilize
sudoto perform administrative actions such as writing to system directories (/etc/apt/keyrings/) and modifying file permissions. The agent is advised to hand these commands to the user for execution. - [COMMAND_EXECUTION]: The skill executes multiple shell commands to search for configuration paths, inspect GPG key metadata, and manage system package repositories.
- [EXTERNAL_DOWNLOADS]: The skill fetches GPG signing keys from external vendor servers using
curlto replace outdated or rotated signing keys. - [INDIRECT_PROMPT_INJECTION]: The skill reads and processes the output of files located in /etc/apt/sources.list.d/ to determine the correct keyring paths.
- Ingestion points: Contents of APT source list files in /etc/apt/sources.list.d/ processed via
rg(SKILL.md). - Boundary markers: No explicit delimiters are used for the external file contents.
- Capability inventory: The skill uses
curlfor network requests andsudo tee/sudo chmodfor system-level file operations (SKILL.md). - Sanitization: The skill provides a verification step using
gpg --show-keysto allow the operator to check the key fingerprint before installation.
Audit Metadata