ssh-hardening
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill employs standard system administration commands such as
sudo,systemctl,adduser, andusermodto perform necessary configuration changes. These actions are transparently documented and consistent with the skill's stated objective. - [INDIRECT_PROMPT_INJECTION]: The Bash scripts ingest interactive user input which is later used in shell commands, creating a theoretical attack surface for local command injection.
- Ingestion points: User input captured via
readcommands inscripts/generate-ssh-keys.shandscripts/setup-ssh-hardening.sh. - Boundary markers: No delimiters or safety instructions are provided to the agent for processing these inputs.
- Capability inventory: The scripts perform file writes to
/etc/ssh/, user creation, and service management usingsystemctl. - Sanitization: The scripts do not validate or sanitize inputs before interpolation into shell commands or configuration files.
Audit Metadata