firewall-configuration

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill manages system network traffic by executing ufw and iptables commands to define and apply firewall rules.
  • [PRIVILEGE_ESCALATION]: The skill requires administrative (root/sudo) access to modify system-level network configurations and install packages via the system package manager. This is consistent with the primary purpose of server firewall configuration.
  • [INDIRECT_PROMPT_INJECTION]: The scripts/setup-firewall.sh script creates an interaction surface by requesting user input for additional firewall ports.
  • Ingestion points: User input is captured via the read -p "Ports: " PORTS command in scripts/setup-firewall.sh.
  • Boundary markers: No explicit instructions to ignore embedded commands are provided for the user prompt.
  • Capability inventory: The script utilizes ufw, apt, and systemctl for system management tasks.
  • Sanitization: Input is robustly sanitized using a regular expression check [[ "$port" =~ ^[0-9]+$ ]] to ensure only numeric port values are accepted.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 09:59 AM
Security Audit — agent-trust-hub — firewall-configuration