azure-hdinsight-migration-esp-to-non-esp
Warn
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: MEDIUMCREDENTIALS_UNSAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill includes instructions to read Kerberos keytab files and cryptographic secrets from sensitive system paths like
/etc/security/keytabs/*.keytabusing elevated privileges. It also backs up sensitive authentication configurations such as/etc/krb5.conf. - [COMMAND_EXECUTION]: The skill makes extensive use of the
shelltool to execute high-privilege commands includingsudo,ssh, and the Azure CLI (az). It also uses shell heredocs (python3 << 'EOF') to dynamically execute Python scripts for processing extracted security data. - [DATA_EXFILTRATION]: The instructions describe how to systematically extract and save security-sensitive metadata, Ranger access policies, and audit logs into local JSON files for inventory and archiving. This process involves the bulk export of the environment's security posture and access history.
Audit Metadata