linux-service-management

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides numerous commands for managing Linux systems, including service lifecycle management via systemctl, log retrieval via journalctl, and resource management using nice, ionice, and systemd-cgtop. It also includes a command sudo install-skills-bin linux-service-management to install convenience scripts.
  • [PRIVILEGE_ESCALATION]: Administrative tasks described in the skill, such as modifying service states, altering system targets, and setting cgroup resource properties, are performed using sudo. This access is necessary for the skill's intended functionality but grants significant control over the host system.
  • [INDIRECT_PROMPT_INJECTION]: The workflow relies on the agent reading and interpreting external data which could be manipulated by an attacker to influence subsequent administrative commands.
  • Ingestion points: Service-specific logs retrieved using sudo journalctl -u <service> in SKILL.md and related reference files.
  • Boundary markers: The instructions lack specific delimiters or guidelines to help the agent distinguish between log data and potential adversarial instructions contained within those logs.
  • Capability inventory: The skill provides the agent with extensive capabilities to modify the system, including restarting services and changing system-wide configurations using sudo systemctl.
  • Sanitization: No procedures are defined for sanitizing or validating log output before the agent proceeds with diagnosis or remediation actions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 03:13 AM