ssh-audit
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
ssh-auditutility from the public GitHub repositoryjtesta/ssh-auditusing themiseversion manager andpipxfor isolated environments. - [COMMAND_EXECUTION]: The skill executes several system-level commands to perform audits and apply hardening fixes. This includes running
ssh-auditfor remote scanning, usingsshd -tfor configuration validation, andsystemctl reloadfor applying changes. It also includes a shell pipeline usingawkto filter the/etc/ssh/modulifile for stronger Diffie-Hellman primes. - [PROMPT_INJECTION]: The skill processes data from remote SSH handshakes. While this represents an indirect injection surface if a malicious server provides crafted handshake strings, the impact is mitigated by the skill's focus on structured reporting and the operator-in-the-loop requirement for applying fixes.
Audit Metadata