fd-audit
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
soak.pyscript executes system utilities such aspgrep,lsof, andpsto collect process IDs and resource usage metrics across Linux and macOS environments.- [COMMAND_EXECUTION]: A test driver feature insoak.pyallows for the execution of arbitrary shell commands provided via the--cmdcommand-line argument. The implementation usesshlex.splitto safely parse inputs into an argument list forsubprocess.runwithout usingshell=True.- [DATA_EXPOSURE]: The script reads process metadata from the/procfilesystem (including/proc/pid/fdand/proc/pid/status) to monitor open descriptors and memory consumption. This behavior is standard for a performance profiling and diagnostic tool.- [EXTERNAL_DOWNLOADS]: The utility uses the built-inurllib.requestmodule to send HTTP requests to user-specified URLs. This is designed to simulate application load and includes the ability to pass user-provided API keys for authenticated endpoint testing.
Audit Metadata