performance-tuning
Warn
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill instructs the agent to perform operations requiring root privileges using
sudo. This includes installing system packages (sudo apt install zram-tools), modifying configuration files in sensitive directories such as/etc/and/boot/firmware/, and managing system services (sudo systemctl restart zramswap).- [COMMAND_EXECUTION]: The skill provides bash command templates that perform direct system modifications. These include usingteewith administrative privileges to write to system-level configuration files like/etc/sysctl.d/99-tuning.conf,/etc/udev/rules.d/60-scheduler.rules, and/etc/systemd/journald.conf.- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface where it ingests untrusted user input and incorporates it into decisions regarding system configuration changes. \n - Ingestion points: User-provided workload descriptions, storage media types (SD vs SSD), and RAM specifications (SKILL.md). \n
- Boundary markers: None identified in the workflow. \n
- Capability inventory: Uses system information tools (
homelab_kernelInfo,homelab_piStatus,homelab_systemdServices) and instructions for shell execution to modify kernel and system configurations. \n - Sanitization: No specific validation or sanitization of user-provided environmental details before they are used to guide system-level modifications.
Audit Metadata