linux-shell-scripting
Warn
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: MEDIUMPRIVILEGE_ESCALATIONPERSISTENCEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PERSISTENCE]: The skill provides templates for scheduling tasks using
crontabin Phase 7, which allows for persistent execution of scripts across system reboots or sessions. - [PRIVILEGE_ESCALATION]: The skill includes multiple commands that require or request elevated privileges, including
sudo apt-getfor package installation,useraddfor account creation,passwdfor setting credentials, andsudo systemctlfor service management. - [REMOTE_CODE_EXECUTION]: Phase 10 includes a remote execution template that uses
sshto pipe local script content directly into a bash shell on a remote server (ssh "$remote_server" "bash -s" < "$remote_script"). - [COMMAND_EXECUTION]: The skill provides templates for executing numerous system commands that perform file management (
rsync,tar,find), network utilities (ping,curl), and system diagnostics. - [EXTERNAL_DOWNLOADS]: The skill includes functionality for downloading and installing external software packages via
apt-getand updating repositories usinggit pull. It also performs network connectivity checks against well-known services including Google and GitHub. - [INDIRECT_PROMPT_INJECTION]: The log analysis components (Error Log Extractor and Web Server Log Analyzer) ingest untrusted data from system and web logs which may be manipulated by attackers.
- Ingestion points: The scripts read content from
/var/log/syslogand/var/log/apache2/access.log(File: references/detailed-guide.md). - Boundary markers: No delimiters or "ignore embedded instructions" warnings are used when processing the log files.
- Capability inventory: The skill possesses high-privilege capabilities including
sudo,crontab,useradd, andsshexecution. - Sanitization: Log data is extracted using
grepandawkwithout escaping or validation before being saved to files or displayed.
Audit Metadata