kill-process
Warn
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs process management by directing the agent to execute system shell commands
lsof -ti :<port>andkill -9 <PID>. - [COMMAND_EXECUTION]: User input from the
$ARGUMENTSvariable is directly interpolated into thelsofcommand template. This introduces a command injection vulnerability where a user could provide input containing shell delimiters (e.g.,;,&,|) to execute arbitrary secondary commands. - [COMMAND_EXECUTION]: The skill utilizes the
kill -9(SIGKILL) command to forcefully terminate processes. If the port-to-PID lookup is manipulated through injected input, an attacker could potentially terminate unauthorized or critical system processes.
Audit Metadata