mac-dns-troubleshooting
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run various subcommands of the
kilobatCLI utility (such asdiagnose,dns-benchmark,http-check, anddns) to gather network information and apply settings. - [EXTERNAL_DOWNLOADS]: The skill recommends installing the
kilobattool via Homebrew from the author's specific tap (seifip/kilobat), which is a standard method for distributing command-line utilities. - [PRIVILEGE_ESCALATION]: Certain operations, such as changing DNS servers or flushing the DNS cache, will trigger a macOS administrator prompt because they modify system-level network configurations.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests JSON-formatted diagnostic data from the
kilobattool, creating a surface for potential instruction injection if the data source (local network state) were maliciously manipulated. - Ingestion points: Output from
kilobat diagnose --json,kilobat dns-benchmark, andkilobat http-check --json(SKILL.md). - Boundary markers: The instructions do not define specific delimiters or warnings for the agent to ignore instructions embedded within the JSON output.
- Capability inventory: The skill has the capability to modify system DNS settings and create configuration profiles via
kilobat dnsandkilobat dns-profilecommands (SKILL.md). - Sanitization: No specific validation or sanitization of the CLI tool's diagnostic output is mentioned in the skill instructions.
Audit Metadata