gnome-wayland-rdp
Warn
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill includes a prebuilt ELF shared library (scripts/libnofuseabort.so) designed to override process behavior at runtime.
- [DYNAMIC_EXECUTION]: The session startup script (scripts/start-gnome-headless-rdp.sh) employs LD_PRELOAD to inject the shared library into the gnome-remote-desktop-daemon process. This allows the skill to stub out FUSE-related functions and prevent service aborts in restricted container environments.
- [COMMAND_EXECUTION]: The skill uses extensive shell commands and scripts to manage system-level services, including D-Bus session management, XDG runtime directory setup, and generating TLS certificates via openssl.
- [PRIVILEGE_ESCALATION]: The skill documentation instructs users to perform privileged operations such as mknod /dev/fuse in the environment entrypoint to enable functionality, and the scripts perform specific file permission modifications (chmod 600) on sensitive key material.
Audit Metadata