ssh-audit
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes various system utilities including
ssh-audit,mise,sshd,systemctl,ufw, andawkto perform audits and manage system configuration.- [PRIVILEGE_ESCALATION]: Utilizessudofor high-privilege tasks such as dry-running SSH configurations, modifying the sensitive/etc/ssh/modulifile, and reloading system services.- [EXTERNAL_DOWNLOADS]: Fetches thessh-auditpackage from the public Python Package Index (PyPI) using themisetool manager.- [INDIRECT_PROMPT_INJECTION]: The skill parses untrusted handshake and banner data from remote SSH servers to determine auditing results and suggest hardening steps. - Ingestion points: Remote SSH server handshake data and version banners.
- Boundary markers: None; processes raw tool output.
- Capability inventory: Subprocess execution for auditing, file system write access for config modification, and service management via
sudo. - Sanitization: No explicit sanitization or validation of the remote service output before interpretation.
Audit Metadata