ebpf-expert
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational content and technical references for eBPF technology, including historical context, architectural diagrams, and programming guides.
- [COMMAND_EXECUTION]: The documentation includes numerous shell command examples (e.g.,
sudo bpftool,ip link,clang) and code snippets in C, Python, Go, and Rust. These are provided for instructional purposes to assist users in understanding eBPF operations and development, rather than as instructions for the agent to perform unauthorized actions. - [DATA_EXFILTRATION]: While the security reference mentions sensitive files such as
/etc/shadow, it does so in the context of explaining how eBPF can be used for security monitoring and auditing (e.g., using Tetragon or BPF LSM). There are no instructions or mechanisms for exfiltrating data to remote destinations.
Audit Metadata