arch-linux
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of system administration commands including
pacman,systemctl,journalctl,bootctl, andbtrfs. These commands are standard for the intended purpose of Arch Linux administration and are accompanied by explicit warnings against dangerous operations such as partial upgrades, removing the last known-good kernel, or performing blanket file overwrites without verification.- [INDIRECT_PROMPT_INJECTION]: The skill provides scripts to ingest system state data, includingjournalctllogs and package metadata. While reading external data is a prerequisite for indirect prompt injection, the skill mitigates this by instructing the agent to perform manual verification (e.g., 'review PKGBUILD and related files before building') and focused triage rather than automated execution based on input content. This capability is essential to the skill's primary function.- [PRIVILEGE_ESCALATION]: The skill frequently employssudofor tasks that require elevated permissions on a Linux system (e.g., package installation, bootloader updates, and filesystem mounting). This is expected behavior for an administrative tool, and the skill includes guidelines for maintaining system integrity during these operations.- [EXTERNAL_DOWNLOADS]: The skill references standard repositories and tools for the Arch ecosystem, such as the Arch User Repository (AUR) andparu. It provides safe procedures for cloning and building AUR packages, emphasizing the importance of inspectingPKGBUILDfiles and PGP keys before installation. All referenced URLs target official or well-known community infrastructure.
Audit Metadata