define-slo-sli-sla
Warn
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to download a pre-compiled binary (
sloth-linux-amd64) from a GitHub release repository (github.com/slok/sloth). While the repository is related to the skill's purpose, it is an external source not managed by a verified enterprise vendor. - [PRIVILEGE_ESCALATION]: The installation procedure involves using
chmod +xto grant execution permissions to the downloaded binary andsudo mvto install it into a system-protected directory (/usr/local/bin). Using root privileges to install third-party binaries is a high-risk operation. - [COMMAND_EXECUTION]: The skill utilizes shell commands through the
Bashtool to perform network downloads (wget), manipulate file permissions (chmod), and manage container images (docker pull). It also makes directPOSTrequests to a local Prometheus service (localhost:9090) to trigger configuration reloads. - [REMOTE_CODE_EXECUTION]: The combination of downloading a remote binary and providing instructions to execute it locally effectively creates a path for remote code execution from the source repository.
Audit Metadata