linux-server-audit
Fail
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: HIGHCREDENTIALS_UNSAFECOMMAND_EXECUTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill instructs the agent to ask users for SSH passwords and then use them with
sshpass -p 'PASSWORD'. Passing passwords via command-line arguments is highly insecure as they can be captured in process lists (e.g., using thepscommand) and system history. - [COMMAND_EXECUTION]: The skill executes arbitrary system commands on remote servers via SSH to perform audits, including reading sensitive configuration files such as SSH settings, crontabs, and internal application data in
/etc/easypanel/. - [DATA_EXFILTRATION]: While intended for auditing, the skill collects sensitive server data (system logs, user lists, SUID files, and configuration details) and aggregates them into a report, which constitutes a broad collection of system metadata.
Recommendations
- AI detected serious security threats
Audit Metadata