debug-linux-host-collection
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill proactively redacts sensitive ingest tokens before the user pastes configuration files into the chat. It uses a masking script to provide only a fingerprint (length and partial characters) for verification, preventing sensitive credentials from entering the AI context.
- [INDIRECT_PROMPT_INJECTION]: The skill implements a sophisticated 'wrap' helper that uses random nonces and character sanitization to encapsulate untrusted data, such as system logs and config files. This follows best practices to ensure that attacker-controlled strings within the data are not interpreted as instructions by the AI agent.
- [PRIVILEGE_ESCALATION]: While the skill suggests commands requiring
sudo(e.g.,systemctl,apt,yum), these are standard for Linux system administration and necessary for troubleshooting service-level components. Destructive actions, such as removing backup directories, are clearly marked with warnings and require explicit user confirmation. - [COMMAND_EXECUTION]: The skill uses
python3 -cfor data parsing and masking. These are short, non-persistent scripts used for safe local data processing within the user's shell and do not represent a remote code execution risk.
Audit Metadata