smbclient

Pass

Audited by Gen Agent Trust Hub on Sep 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the smbclient command-line utility to perform network operations and interact with remote Windows file shares.
  • Evidence: Multiple bash examples using smbclient for share enumeration and connection.
  • [DATA_EXFILTRATION]: The skill includes instructions for recursive, non-interactive downloading of all files from a remote share, which can be used for bulk data extraction.
  • Evidence: smbclient //10.10.10.100/SHARE -U 'contoso\auditor%<password>' -c 'recurse; prompt off; mget *'
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external network sources (SMB shares), creating a surface where malicious content in remote files could influence the agent's behavior if processed downstream.
  • Ingestion points: File content and metadata retrieved from remote SMB shares via mget and share enumeration.
  • Boundary markers: No specific boundary markers or instruction-guarding delimiters are defined for handling the retrieved content.
  • Capability inventory: The skill uses smbclient for remote network communication and file system operations.
  • Sanitization: No evidence of sanitization or validation of the remote data before it enters the agent context.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 3, 2026, 02:39 AM
Security Audit — agent-trust-hub — smbclient