firewall-configuration
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill manages system network traffic by executing
ufwandiptablescommands to define and apply firewall rules. - [PRIVILEGE_ESCALATION]: The skill requires administrative (root/sudo) access to modify system-level network configurations and install packages via the system package manager. This is consistent with the primary purpose of server firewall configuration.
- [INDIRECT_PROMPT_INJECTION]: The
scripts/setup-firewall.shscript creates an interaction surface by requesting user input for additional firewall ports. - Ingestion points: User input is captured via the
read -p "Ports: " PORTScommand inscripts/setup-firewall.sh. - Boundary markers: No explicit instructions to ignore embedded commands are provided for the user prompt.
- Capability inventory: The script utilizes
ufw,apt, andsystemctlfor system management tasks. - Sanitization: Input is robustly sanitized using a regular expression check
[[ "$port" =~ ^[0-9]+$ ]]to ensure only numeric port values are accepted.
Audit Metadata