php2shell-emergency
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The runbook instructs the agent to download and execute a remote script from a third-party security vendor (ecomscan.com) by piping it directly into the shell in
references/detection.md.- [COMMAND_EXECUTION]: The skill downloads a binary from a GitHub repository (Neo23x0/process-watcher) and executes it on the host system to monitor for malicious PHP process activity.- [PRIVILEGE_ESCALATION]: Extensive use ofsudois required for installing dependencies (yara, wordfence), running system-level scanners (LOKI), and deploying runtime monitoring tools.- [EXTERNAL_DOWNLOADS]: The skill fetches diagnostic data, version information, and security tools from multiple external sources including php.net, GitHub, and various security research domains.- [INDIRECT_PROMPT_INJECTION]: - Ingestion points: The agent is instructed to ingest and analyze web server access logs (
/var/log/nginx/access.log) inreferences/detection.mdto identify malicious request patterns. - Boundary markers: No delimiters or instructions to ignore instructions embedded within the logs are provided.
- Capability inventory: The agent possesses high-privilege capabilities including filesystem modification, network operations, and root-level command execution via
sudo. - Sanitization: There is no explicit sanitization or validation logic applied to the log content before it is parsed by the agent.
Audit Metadata