ssh-audit

Pass

Audited by Gen Agent Trust Hub on Nov 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Executes various system utilities including ssh-audit, mise, sshd, systemctl, ufw, and awk to perform audits and manage system configuration.- [PRIVILEGE_ESCALATION]: Utilizes sudo for high-privilege tasks such as dry-running SSH configurations, modifying the sensitive /etc/ssh/moduli file, and reloading system services.- [EXTERNAL_DOWNLOADS]: Fetches the ssh-audit package from the public Python Package Index (PyPI) using the mise tool manager.- [INDIRECT_PROMPT_INJECTION]: The skill parses untrusted handshake and banner data from remote SSH servers to determine auditing results and suggest hardening steps.
  • Ingestion points: Remote SSH server handshake data and version banners.
  • Boundary markers: None; processes raw tool output.
  • Capability inventory: Subprocess execution for auditing, file system write access for config modification, and service management via sudo.
  • Sanitization: No explicit sanitization or validation of the remote service output before interpretation.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 2, 2026, 07:15 PM