ssh-hardening
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard system administration tools (adduser, usermod, ssh-keygen, systemctl) to configure server security. These tools are explicitly listed in the
allowed-toolsfrontmatter and are used for their intended administrative purposes. - [SAFE]: The scripts provided (
generate-ssh-keys.shandsetup-ssh-hardening.sh) perform legitimate security operations. They include sanity checks, such as verifying the execution environment (root/sudo checks), prompting for user confirmation before making changes, and performing syntax tests (sshd -t) before applying configurations. - [SAFE]: The skill emphasizes operational safety by repeatedly warning the user to maintain an active SSH session while testing new configurations to prevent accidental lockout.
- [DATA_EXPOSURE_&_EXFILTRATION]: No network exfiltration or unauthorized sensitive data access was found. The skill guides the user to generate keys locally and transfer public keys to the server using standard, secure methods (
ssh-copy-id). - [PROMPT_INJECTION]: No attempts to override agent behavior or bypass safety guidelines were detected in the instructions or metadata.
Audit Metadata