virtualmin-databases

Fail

Audited by Gen Agent Trust Hub on Jul 6, 2026

Risk Level: HIGHCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
  • [COMMAND_EXECUTION]: All management scripts provided in the skill (e.g., create-database.sh, delete-database.sh, modify-database-pass.sh) execute the virtualmin utility using sudo. This configuration grants the skill administrative control over the system's database infrastructure and allows it to perform high-privilege operations.
  • [CREDENTIALS_UNSAFE]: The modify-database-pass.sh script accepts a new database password through a command-line argument (--pass). This method of handling credentials is insecure because the password value remains in the shell's command history file (such as ~/.bash_history) and is visible to other system users through process monitoring utilities like ps or top while the command is running.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Jul 6, 2026, 09:54 PM
Security Audit — agent-trust-hub — virtualmin-databases