smbclient
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
smbclientcommand-line utility to perform network operations and interact with remote Windows file shares. - Evidence: Multiple bash examples using
smbclientfor share enumeration and connection. - [DATA_EXFILTRATION]: The skill includes instructions for recursive, non-interactive downloading of all files from a remote share, which can be used for bulk data extraction.
- Evidence:
smbclient //10.10.10.100/SHARE -U 'contoso\auditor%<password>' -c 'recurse; prompt off; mget *' - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external network sources (SMB shares), creating a surface where malicious content in remote files could influence the agent's behavior if processed downstream.
- Ingestion points: File content and metadata retrieved from remote SMB shares via
mgetand share enumeration. - Boundary markers: No specific boundary markers or instruction-guarding delimiters are defined for handling the retrieved content.
- Capability inventory: The skill uses
smbclientfor remote network communication and file system operations. - Sanitization: No evidence of sanitization or validation of the remote data before it enters the agent context.
Audit Metadata