upgrade-vm
Fail
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: HIGHCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill directly interpolates user-provided variables (e.g., , , ) into shell commands executed via ssh and curl. This allows for command injection, enabling an attacker to execute arbitrary code by crafting malicious input values.
- [REMOTE_CODE_EXECUTION]: The skill fetches and executes external scripts (provision-iv.sh, smoke-provision.sh, install.sh) after cloning them from remote repositories. This behavior constitutes a remote code execution vector.
- [CREDENTIALS_UNSAFE]: The skill handles Tailscale OAuth tokens retrieved from 1Password. The use of these tokens in shell-based workflows that are susceptible to command injection increases the risk of credential exposure or exfiltration.
Recommendations
- AI detected serious security threats
Audit Metadata