keepass-credential-ssh
Warn
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: MEDIUMDATA_EXFILTRATIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill accesses the
~/.sshdirectory to search for and load private SSH keys, which are sensitive authentication credentials. - [COMMAND_EXECUTION]: The skill utilizes the
ssh-addutility to list keys in the agent and load keys from the filesystem. - [DATA_EXFILTRATION]: The skill retrieves cryptographic attachments from a KeePass database, involving the handling of private key material.
- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it ingests data from local files and vault attachments without explicit boundary markers or sanitization. Ingestion points: ~/.ssh files and KeePass attachments (SKILL.md). Boundary markers: Absent. Capability inventory: ssh-add command execution (SKILL.md). Sanitization: Absent.
Audit Metadata