gentleman-system
Warn
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION] (MEDIUM): The skill defines a comprehensive API for executing shell commands (
Run,RunWithLogs,RunBrewWithLogs,RunPkgInstall). Evidence inPattern 4shows these functions are intended for direct system interaction. - [PRIVILEGE_ESCALATION] (MEDIUM): Explicit support for root-level execution is provided through
RunSudoandRunSudoWithLogs. Examples inExample 2show these being used for package managers (pacman,apt-get), which can be leveraged to install unauthorized software. - [INDIRECT_PROMPT_INJECTION] (LOW): A vulnerability surface exists in
Example 2andExample 4where an agent might interpolate untrusted user requirements into system commands or file paths (e.g.,destDir,toolname) without explicit sanitization patterns provided in the instructions. - [DATA_EXPOSURE] (LOW): The skill includes patterns for accessing system metadata such as
HomeDir,UserShell, and environment variables likeTERMUX_VERSIONandPREFIXto determine OS state.
Audit Metadata