configuring-host-based-intrusion-detection

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the official Wazuh GPG key and agent installers from packages.wazuh.com, which is the recognized repository for the Wazuh security platform.
  • [COMMAND_EXECUTION]: Instructions include standard administrative shell commands and PowerShell scripts for installing security agents, configuring services, and managing local firewall rules via active response.
  • [DYNAMIC_EXECUTION]: The provided scripts/agent.py utility uses subprocess.run to interface with osqueryi, enabling automated SQL-based inspection of host processes and system state as part of a security audit.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 07:40 PM