k7-total-security-configuration
Fail
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to clone a repository from GitHub (
29Hinojosa/K7-Total-Security-Unlock-Patch-16-0-1195.git) that is described as containing an 'Unlock Patch' for commercial security software. Downloading and using tools from such unofficial sources is a high-risk activity often associated with malware distribution. - [COMMAND_EXECUTION]: The documentation provides shell commands intended for deployment and management of this unofficial software, including script execution for fleet deployment and local CLI management tools (
k7-console). - [REMOTE_CODE_EXECUTION]: The deployment workflow (
deploy_k7_fleet.sh) demonstrates a pattern where the AI or a user would iterate through hosts and execute remote configuration/commands using authentication certificates, which facilitates the spread of potentially compromised software across a network.
Recommendations
- AI detected serious security threats
Audit Metadata