essh
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
esshtool from the author's own GitHub repository (https://github.com/lirrensi/agent-sommelier) using theuvtool manager. As this is a resource owned by the skill's author, it is documented as a vendor dependency. - [COMMAND_EXECUTION]: The skill's primary function is to execute shell commands on remote servers via SSH (
essh <name> <command>). While this is a high-privilege capability, it is the explicitly stated purpose of the profile manager. - [COMMAND_EXECUTION]: Static analysis detected potentially destructive commands such as
rm -rf /andrm -rf /etc. Upon review, these strings are used exclusively as illustrative examples in the documentation to explain how the tool's command filtering and blocking mechanisms function.
Audit Metadata