aris-run-experiment
Warn
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: MEDIUMCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill instructs the agent to read
CLAUDE.mdto extract sensitive information likeWANDB_API_KEYand then use it in shell commands (e.g.,ssh <server> "wandb login <WANDB_API_KEY>"). This involves active handling and potential exposure of long-lived credentials in command history. - [DATA_EXFILTRATION]: The skill accesses sensitive file paths including
~/.claude/feishu.jsonto read notification configurations andCLAUDE.mdfor server/API secrets. While used for legitimate purposes, this represents an access pattern to sensitive user data. - [COMMAND_EXECUTION]: The skill performs extensive command execution across several contexts:
- Remote Execution: Uses
sshto launch background processes viascreenand perform environment setup on remote servers. - Dynamic Script Generation: Step 4 describes generating a
modal_launcher.pyscript at runtime and executing it viamodal run. - Code Modification: Step 3.5 explicitly instructs the agent to modify the user's training scripts to inject
wandblogging logic. - [EXTERNAL_DOWNLOADS]: The skill facilitates downloading and installing Python packages on remote instances via
pip install -r requirements.txt.
Audit Metadata