linux-ops
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides structured workflows that explicitly reject common security pitfalls, such as using 'chmod 777', disabling safety filters, or granting broad capabilities like CAP_SYS_ADMIN. It mandates that diagnostic analysis be performed separately from system mutations and requires explicit authorization for any changes.
- [SAFE]: All external references in the SOURCES.yaml and reference documentation point to official manual pages (freedesktop.org, netfilter.org, nginx.org) or well-known, trusted open-source projects (restic, rsync). These are used strictly for technical reference and do not involve runtime remote code execution.
- [INDIRECT_PROMPT_INJECTION]: As a tool designed for analyzing system logs and incident evidence, the skill naturally processes untrusted data. The risk of indirect prompt injection is mitigated by mandatory 'Gate' steps and instructions to verify all findings through independent observation and application-specific health checks before proceeding with repairs.
- [SAFE]: The skill maintains strong boundaries regarding sensitive data, instructing the agent to exclude private keys and secret environment variables from its analysis and reports. No hardcoded credentials or unauthorized network exfiltration patterns were identified.
Audit Metadata