debug-linux-host-collection

Pass

Audited by Gen Agent Trust Hub on Aug 18, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The skill proactively redacts sensitive ingest tokens before the user pastes configuration files into the chat. It uses a masking script to provide only a fingerprint (length and partial characters) for verification, preventing sensitive credentials from entering the AI context.
  • [INDIRECT_PROMPT_INJECTION]: The skill implements a sophisticated 'wrap' helper that uses random nonces and character sanitization to encapsulate untrusted data, such as system logs and config files. This follows best practices to ensure that attacker-controlled strings within the data are not interpreted as instructions by the AI agent.
  • [PRIVILEGE_ESCALATION]: While the skill suggests commands requiring sudo (e.g., systemctl, apt, yum), these are standard for Linux system administration and necessary for troubleshooting service-level components. Destructive actions, such as removing backup directories, are clearly marked with warnings and require explicit user confirmation.
  • [COMMAND_EXECUTION]: The skill uses python3 -c for data parsing and masking. These are short, non-persistent scripts used for safe local data processing within the user's shell and do not represent a remote code execution risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 18, 2026, 09:22 PM
Security Audit — agent-trust-hub — debug-linux-host-collection