skills/iuliandita/skills/arch-linux/Gen Agent Trust Hub

arch-linux

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill makes extensive use of system administration commands including pacman, systemctl, journalctl, bootctl, and btrfs. These commands are standard for the intended purpose of Arch Linux administration and are accompanied by explicit warnings against dangerous operations such as partial upgrades, removing the last known-good kernel, or performing blanket file overwrites without verification.- [INDIRECT_PROMPT_INJECTION]: The skill provides scripts to ingest system state data, including journalctl logs and package metadata. While reading external data is a prerequisite for indirect prompt injection, the skill mitigates this by instructing the agent to perform manual verification (e.g., 'review PKGBUILD and related files before building') and focused triage rather than automated execution based on input content. This capability is essential to the skill's primary function.- [PRIVILEGE_ESCALATION]: The skill frequently employs sudo for tasks that require elevated permissions on a Linux system (e.g., package installation, bootloader updates, and filesystem mounting). This is expected behavior for an administrative tool, and the skill includes guidelines for maintaining system integrity during these operations.- [EXTERNAL_DOWNLOADS]: The skill references standard repositories and tools for the Arch ecosystem, such as the Arch User Repository (AUR) and paru. It provides safe procedures for cloning and building AUR packages, emphasizing the importance of inspecting PKGBUILD files and PGP keys before installation. All referenced URLs target official or well-known community infrastructure.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 02:02 AM
Security Audit — agent-trust-hub — arch-linux