operating-sliver-c2
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches installation scripts and release binaries from well-known sources including sliver.sh and the BishopFox GitHub repository.
- [REMOTE_CODE_EXECUTION]: Includes instructions to download and execute the official Sliver installation script using a pipe-to-shell pattern (
curl | bash) for framework setup. - [COMMAND_EXECUTION]: Utilizes elevated privileges (
sudo) for the installation process and to bind privileged network ports (such as 443 and 53) required for the command-and-control listeners. - [COMMAND_EXECUTION]: The provided script
scripts/agent.pyautomates interactions with the Sliver gRPC API, enabling session management, implant generation, and command execution on remote targets. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because
scripts/agent.pyprocesses and displays unsanitized output from remote commands. While this is a standard behavior for security tools, such output could contain content designed to influence the AI agent's subsequent logic.
Audit Metadata