deploy-linux-host-explorer
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from host logs and command outputs. It addresses this surface with a mandatory evidence chain: 1) Ingestion points include output from
observe-agent status,observe datastream view, and system logs; 2) Boundary markers are provided by awraphelper that uses cryptographically random nonces; 3) Capability inventory includes shell command execution and Observe CLI operations; 4) Sanitization is performed via asedandtrpipeline to remove ANSI escape sequences and non-printable characters. - [COMMAND_EXECUTION]: The skill instructs the agent to perform several shell-based operations to interact with the Observe platform. Evidence includes commands such as
observe auth status,observe auth login, andobserve datastream view. - [PRIVILEGE_ESCALATION]: Administrative privileges are requested for host setup tasks. Evidence includes the use of
sudo hostnamectland the installation of theobserve-agentas a systemd service, which are necessary for the skill's stated purpose. - [DYNAMIC_EXECUTION]: The skill dynamically updates its own instructions and loads referenced modules. Evidence includes the mandatory requirement to run
observe skill view --contentand--pathto load the latest skill logic and supporting documents at runtime.
Audit Metadata