warp
Fail
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: HIGHCOMMAND_EXECUTIONDATA_EXFILTRATIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is highly vulnerable to command injection on the local host. User-provided input in the
$TARGETand$NODEvariables is directly interpolated into a Python script string (python3 -c "... target = '$TARGET' ...") and shell commands (ssh -G "$NODE"). An attacker could provide a crafted target string that breaks out of the string literal or command structure to execute arbitrary commands locally. - [DATA_EXFILTRATION]: The skill accesses sensitive local files and configuration. It reads from
~/.ssh/configusingssh -Gand accessescontacts.jsonand a warp log file within the project directory. Accessing SSH configuration can expose internal network topology and host details. - [REMOTE_CODE_EXECUTION]: The skill provides a primitive for executing arbitrary commands on remote servers via SSH (
ssh -t "$NODE" "..."). While this is the intended functionality, the lack of input validation and the ability to control the remote target and session names increases the risk of unauthorized remote code execution if the skill is misused.
Recommendations
- AI detected serious security threats
Audit Metadata