skills/mukul975/anthropic-cybersecurity-skills/implementing-file-integrity-monitoring-with-aide/Gen Agent Trust Hub
implementing-file-integrity-monitoring-with-aide
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPERSISTENCE
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/agent.pyfile usessubprocess.runto execute the systemaidebinary for initialization (--init) and integrity checking (--check). It also usescpto manage the AIDE database files. - [PERSISTENCE]: The skill facilitates the creation of a cron job for scheduled integrity monitoring, which involves writing a shell script to
/etc/cron.daily/or similar paths to maintain monitoring over time. - [PRIVILEGE_ESCALATION]: The documentation explicitly states that root or sudo access is required for the skill to function, as AIDE needs permissions to scan restricted system directories and sensitive files like
/etc/shadow.
Audit Metadata