Network 101
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION] (MEDIUM): The skill includes numerous commands using
sudoto perform administrative tasks, such as installing packages (apt install), managing system services (systemctl), modifying firewall rules (ufw), and creating files in system directories (/var/www/html/). These commands are essential for service configuration but grant high-level system control.\n- [EXTERNAL_DOWNLOADS] (LOW): The skill instructs the user to download and install various software packages (apache2,snmpd,samba) from external repositories using theaptpackage manager. While these are standard repositories, the action of fetching external code is present.\n- [PROMPT_INJECTION] (LOW): The skill contains an indirect prompt injection surface by interpolating user-provided target addresses into shell commands. 1. Ingestion points: User-supplied IP addresses or hostnames in enumeration commands (e.g.,nmap,smbclient,snmpwalk). 2. Boundary markers: Absent. 3. Capability inventory: Administrative command execution (sudo), service management, and network tool execution. 4. Sanitization: Absent. Target inputs are used directly in terminal commands.
Audit Metadata