virtualmin-databases
Fail
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: HIGHCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: All management scripts provided in the skill (e.g.,
create-database.sh,delete-database.sh,modify-database-pass.sh) execute thevirtualminutility usingsudo. This configuration grants the skill administrative control over the system's database infrastructure and allows it to perform high-privilege operations. - [CREDENTIALS_UNSAFE]: The
modify-database-pass.shscript accepts a new database password through a command-line argument (--pass). This method of handling credentials is insecure because the password value remains in the shell's command history file (such as~/.bash_history) and is visible to other system users through process monitoring utilities likepsortopwhile the command is running.
Recommendations
- AI detected serious security threats
Audit Metadata