skills/mukul975/anthropic-cybersecurity-skills/implementing-syslog-centralization-with-rsyslog/Gen Agent Trust Hub
implementing-syslog-centralization-with-rsyslog
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/agent.pyexecutes local system commands usingsubprocess.runto generate TLS certificates via OpenSSL. - [COMMAND_EXECUTION]: The skill uses the
paramikolibrary to execute thesystemctl restart rsyslogcommand on remote servers after deploying configurations. - [PRIVILEGE_ESCALATION]: The deployment functionality in
scripts/agent.pydefaults to therootuser for SSH connections, allowing for system-level configuration and service management. - [INDIRECT_PROMPT_INJECTION]: The skill accepts IP addresses and hostnames as input, which are interpolated into rsyslog configuration templates and command-line arguments for system tools.
- Ingestion points: Command-line arguments
--server-ipand--clientsinscripts/agent.py. - Boundary markers: No input validation or delimiters are present to constrain the supplied addresses.
- Capability inventory: The skill can execute local shell commands, perform remote command execution via SSH, and write files to the remote filesystem via SFTP.
- Sanitization: No sanitization or escaping logic is implemented for the interpolated variables.
Audit Metadata