ssh-audit

Pass

Audited by Gen Agent Trust Hub on Jul 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the ssh-audit utility from the public GitHub repository jtesta/ssh-audit using the mise version manager and pipx for isolated environments.
  • [COMMAND_EXECUTION]: The skill executes several system-level commands to perform audits and apply hardening fixes. This includes running ssh-audit for remote scanning, using sshd -t for configuration validation, and systemctl reload for applying changes. It also includes a shell pipeline using awk to filter the /etc/ssh/moduli file for stronger Diffie-Hellman primes.
  • [PROMPT_INJECTION]: The skill processes data from remote SSH handshakes. While this represents an indirect injection surface if a malicious server provides crafted handshake strings, the impact is mitigated by the skill's focus on structured reporting and the operator-in-the-loop requirement for applying fixes.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 18, 2026, 06:59 AM
Security Audit — agent-trust-hub — ssh-audit