cyber-audit
Warn
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various system and package manager commands including npm, pip, brew, lsof, and find to audit the host machine state.
- [DATA_EXFILTRATION]: Accesses sensitive shell configuration files such as ~/.zshrc, ~/.zprofile, and the ~/.config directory to inspect environment variables. These files are highly sensitive as they commonly contain credentials, tokens, or secret keys.
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection. 1. Ingestion points: The agent reads external security advisory text from user input or remote sources (SKILL.md). 2. Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present for the advisory content. 3. Capability inventory: The agent has the ability to execute shell commands and read/write files based on its analysis of the advisory. 4. Sanitization: No sanitization or validation of the ingested advisory content is performed before it influences agent actions.
- [EXTERNAL_DOWNLOADS]: Retrieves security advisory and CVE information from external sources to define the parameters and requirements of the audit process.
Audit Metadata