custom-cleanup-process
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands (
lsof,kill) to terminate processes based on calculated port numbers. This involves direct interaction with the system's process management table. - [COMMAND_EXECUTION]: Port numbers are derived from the
issue_numberinput using arithmetic expansion. If the agent or the shell environment does not strictly validate this input as an integer, it could be exploited for command injection (e.g., providing an input like1; rm -rf /). - [COMMAND_EXECUTION]: The skill includes a fallback to
kill -9, which is a forceful termination of processes and can lead to data corruption or orphaned resources if not handled gracefully by the target application.
Audit Metadata