linux-service-management
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous commands for managing Linux systems, including service lifecycle management via
systemctl, log retrieval viajournalctl, and resource management usingnice,ionice, andsystemd-cgtop. It also includes a commandsudo install-skills-bin linux-service-managementto install convenience scripts. - [PRIVILEGE_ESCALATION]: Administrative tasks described in the skill, such as modifying service states, altering system targets, and setting cgroup resource properties, are performed using
sudo. This access is necessary for the skill's intended functionality but grants significant control over the host system. - [INDIRECT_PROMPT_INJECTION]: The workflow relies on the agent reading and interpreting external data which could be manipulated by an attacker to influence subsequent administrative commands.
- Ingestion points: Service-specific logs retrieved using
sudo journalctl -u <service>inSKILL.mdand related reference files. - Boundary markers: The instructions lack specific delimiters or guidelines to help the agent distinguish between log data and potential adversarial instructions contained within those logs.
- Capability inventory: The skill provides the agent with extensive capabilities to modify the system, including restarting services and changing system-wide configurations using
sudo systemctl. - Sanitization: No procedures are defined for sanitizing or validating log output before the agent proceeds with diagnosis or remediation actions.
Audit Metadata