Skills
Navigate
skills/redyuan43/my-skills-repo/ssh-monitor-cycle/Gen Agent Trust Hub

ssh-monitor-cycle

Warn

Audited by Gen Agent Trust Hub on Jun 21, 2026

Risk Level: MEDIUMDATA_EXFILTRATIONREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [DATA_EXFILTRATION]: The script reads sensitive local SSH configuration files (~/.ssh/config) and accesses the local SSH public key (~/.ssh/id_ed25519.pub) to manage remote connections.
  • [REMOTE_CODE_EXECUTION]: The skill dynamically generates a multi-line bash script and deploys it for execution on remote servers using SSH.
  • [COMMAND_EXECUTION]: The script uses the subprocess and pty modules to execute local commands including ssh and ssh-copy-id. Additionally, the remote bash script contains commands to install software using sudo across various package managers (apt, dnf, yum, pacman, etc.).
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 21, 2026, 11:33 AM