cdk-escape
Fail
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: HIGHPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill facilitates escaping containerized environments (Docker/K8s) to gain host access through techniques such as mounting cgroups, disks, and procfs.
- [EXTERNAL_DOWNLOADS]: The skill includes instructions to download an external binary from a remote 'ATTACKER' URL using curl or wget.
- [REMOTE_CODE_EXECUTION]: The instructions involve downloading an external file, granting it execution permissions with chmod, and executing it within the container environment.
- [DATA_EXFILTRATION]: The skill contains commands aimed at exfiltrating sensitive information, including the /etc/shadow file, Kubernetes Service Account tokens, and cloud provider metadata.
- [COMMAND_EXECUTION]: The skill provides specific commands to exploit multiple known vulnerabilities, including kernel exploits (CVE-2021-22555, CVE-2022-0847) and container runtime escapes (CVE-2019-5736).
Recommendations
- AI detected serious security threats
Audit Metadata