linux-privilege-escalation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow references fetching scripts from GitHub (such as LinPEAS), which constitutes fetching community repository content categorized under low indirect prompt injection risk.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The referenced GitHub URLs point to third-party tools (PEASS-ng and linux-exploit-suggester) that are downloaded and executed during runtime enumeration, constituting a common unofficial operational dependency.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill provides instructions and examples for performing Linux privilege escalation attacks (exploiting sudo misconfigurations, SUID binaries, and cron jobs), which involves compromising the security state of the host machine.