deploy-linux-host-explorer
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a sophisticated security boundary for handling untrusted data. It requires the user to use a
wraphelper script that adds unique nonces and sanitizes ANSI escape sequences from command outputs (e.g., agent logs or status reports). This prevents workload-emitted data from potentially tricking the AI into executing unintended instructions. - [SAFE]: Data exfiltration risks are mitigated by design. Sensitive information such as ingest tokens are stored in environment variables (
$OBSERVE_TOKEN) and interpolated by the user's shell. The skill instructions specifically ensure that these raw secrets never enter the AI's context. - [SAFE]: Command execution is limited to official
observeCLI tools and standard system commands (e.g.,systemd,hostnamectl). The skill uses theallowed-toolsfrontmatter (referenced internally) and restricts execution to the intended administrative purposes of host onboarding. - [SAFE]: External references target official vendor documentation (
docs.observeinc.com) and well-known, trusted platforms. No suspicious remote code execution or obfuscation patterns were detected.
Audit Metadata