network-monitoring
Fail
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: HIGHCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill repeatedly instructs the agent to execute commands with elevated privileges using
sudo(e.g.,sudo bandwhich,sudo sniffnet), which poses a risk of unauthorized system modifications if instructions are manipulated. - [COMMAND_EXECUTION]: The skill provides instructions to modify system capabilities using
sudo setcap cap_net_raw,cap_net_admin+ep $(which bandwhich), which changes the security posture of the binary. - [EXTERNAL_DOWNLOADS]: The skill directs the installation of third-party tools from non-trusted GitHub repositories (
imsnif/bandwhichandGyulyVGC/sniffnet) usingcargo install,brew install, and direct downloads from GitHub releases.
Recommendations
- AI detected serious security threats
Audit Metadata