k7-total-security-deployment
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides commands to download security agent installers from 'example.com'. These are placeholders for official installer URLs and do not point to known malicious domains.
- [COMMAND_EXECUTION]: The skill instructions include standard administrative commands for software installation and configuration (e.g.,
msiexec,dpkg,rpm) and a specialized CLI tool (k7-console). These operations are consistent with the skill's primary purpose of security software deployment. - [PRIVILEGE_ESCALATION]: Deployment commands for macOS and Linux utilize
sudoto install packages and manage system services. This is a standard requirement for installing endpoint protection software that requires system-level access. - [SAFE_PRACTICE]: Sensitive data like API keys, certificates, and passwords are managed using environment variable placeholders (e.g.,
${OPENAI_API_KEY},${ES_PASSWORD}) rather than being hardcoded, which follows security best practices.
Audit Metadata