ssh-key-setup
Warn
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONCREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple shell commands to manage SSH infrastructure, such as
ssh-keygenfor key generation,chmodfor securing file permissions, andssh -Tfor verifying remote connectivity. - [CREDENTIALS_UNSAFE]: The skill accesses sensitive credential files including
~/.git-credentialsand~/.netrc. It usescatandgrepto search for legacy Personal Access Tokens (PATs) such asglpat. This pattern exposes cleartext authentication secrets to the AI agent during the execution phase. - [PROMPT_INJECTION]: The skill possesses surfaces for indirect prompt injection. 1. Ingestion points: The agent reads server metadata from
references/server-facts.mdand accepts arbitrary remote hostnames from user input. 2. Boundary markers: Absent; there are no explicit delimiters used to isolate untrusted data from instructions. 3. Capability inventory: The skill has the ability to read and write to the local filesystem and interact with the network via SSH. 4. Sanitization: None; data ingested from external sources or user input is passed directly to system commands without validation or escaping.
Audit Metadata