debian-ubuntu
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill documentation includes sequences for executing high-privilege operations such as modifying
/etc/system configuration files, managing the GRUB bootloader, and performing system recovery usingchroot. These actions are consistent with the skill's administrative use-case but grant the agent broad control over the host operating system. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted system data that provides a surface for indirect prompt injection.
- Ingestion points: Diagnostic commands like
journalctl,dmesg, andapt list --upgradableinSKILL.mdand reference files gather data from external logs and metadata. - Boundary markers: The skill does not implement clear delimiters to distinguish system-generated output from agent instructions.
- Capability inventory: The agent has access to high-privilege commands via
sudo, the ability to modify configuration files, and package management capabilities. - Sanitization: There is no evidence of sanitization or filtering applied to ingested diagnostic data.
Audit Metadata