linux-security-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the agent executing numerous shell commands, many with
sudoprivileges, to inspect system configuration, logs, and network state. This is functionally necessary for a security audit but grants the agent extensive access to the underlying host. - [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface for indirect prompt injection by instructing the agent to ingest and analyze data from the host system that could be influenced by an attacker.
- Ingestion points: The agent is instructed to read command outputs from
ss,netstat,ps, and log files such as/var/log/fail2ban.logand/var/log/audit/audit.log(referenced inreferences/audit-layers.md). - Boundary markers: Absent. The instructions do not specify the use of delimiters or 'ignore embedded instructions' warnings when the agent processes command output.
- Capability inventory: The agent has full terminal access to execute further commands based on its analysis of the ingested data.
- Sanitization: None. The skill provides no guidance on filtering or escaping the system data before it is incorporated into the agent's context.
Audit Metadata