linux-service-triage

Pass

Audited by Gen Agent Trust Hub on Mar 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides reference commands for high-privilege system operations, including service management (systemctl restart/status), process control (kill), and filesystem permission adjustments (chmod, chown). These are intended for triage purposes and are governed by instructions requiring user approval before execution.\n- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface due to its core function of analyzing external data.\n
  • Ingestion points: User-provided logs and system status excerpts as defined in the SKILL.md inputs section.\n
  • Boundary markers: No explicit delimiters or safety instructions are defined to encapsulate untrusted log data during analysis.\n
  • Capability inventory: Potential access to significant system-level utilities (systemctl, journalctl, ss, nginx, dig, ls, namei) as documented in references/triage-commands.md.\n
  • Sanitization: No sanitization or validation of the log content is implemented before the agent processes it for diagnostic insight.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 5, 2026, 07:55 AM