Skills
skills/mukul975/anthropic-cybersecurity-skills/analyzing-linux-kernel-rootkits/Gen Agent Trust Hub

analyzing-linux-kernel-rootkits

Pass

Audited by Gen Agent Trust Hub on Mar 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script agent.py executes system utilities including vol (Volatility3) and rkhunter via subprocess.run to perform forensic analysis. It also reads system-level files such as /proc/modules and /sys/module to perform cross-view analysis for detecting hidden kernel modules.
  • [EXTERNAL_DOWNLOADS]: The skill documentation references the installation of the volatility3 Python package and directs users to the Volatility Foundation's official GitHub repository for downloading symbol tables. These sources are well-known and trusted within the cybersecurity community for forensic purposes.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 15, 2026, 12:27 AM