skills/marcfargas/skills/pm2/Gen Agent Trust Hub

pm2

Warn

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [Persistence Mechanisms] (MEDIUM): The skill details how to use pm2 startup and pm2 save to configure processes that automatically start upon system reboot, which is a method of maintaining persistent access.
  • [Privilege Escalation] (MEDIUM): Documentation explicitly mentions that the pm2 startup command may require sudo or administrator privileges to modify system services.
  • [Unverifiable Dependencies] (MEDIUM): Recommends the installation of external modules via pm2 install pm2-logrotate, which downloads and executes code from external registries.
  • [Dynamic Execution] (MEDIUM): Facilitates the execution of arbitrary JavaScript through the use of ecosystem.config.cjs files and one-line Node.js scripts via node -e.
  • [Indirect Prompt Injection] (LOW): The skill demonstrates parsing command output (pm2 jlist) which could ingest untrusted data if process metadata or logs are manipulated by an attacker. Evidence: 1. Ingestion: pm2 jlist piped to node. 2. Boundary markers: Absent. 3. Capability inventory: node -e execution. 4. Sanitization: None documented.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 17, 2026, 06:15 PM