operating-sliver-c2

Pass

Audited by Gen Agent Trust Hub on Aug 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches installation scripts and release binaries from well-known sources including sliver.sh and the BishopFox GitHub repository.
  • [REMOTE_CODE_EXECUTION]: Includes instructions to download and execute the official Sliver installation script using a pipe-to-shell pattern (curl | bash) for framework setup.
  • [COMMAND_EXECUTION]: Utilizes elevated privileges (sudo) for the installation process and to bind privileged network ports (such as 443 and 53) required for the command-and-control listeners.
  • [COMMAND_EXECUTION]: The provided script scripts/agent.py automates interactions with the Sliver gRPC API, enabling session management, implant generation, and command execution on remote targets.
  • [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because scripts/agent.py processes and displays unsanitized output from remote commands. While this is a standard behavior for security tools, such output could contain content designed to influence the AI agent's subsequent logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 7, 2026, 04:19 PM
Security Audit — agent-trust-hub — operating-sliver-c2