Skills
skills/mukul975/anthropic-cybersecurity-skills/implementing-network-access-control/Gen Agent Trust Hub

implementing-network-access-control

Warn

Audited by Gen Agent Trust Hub on Apr 18, 2026

Risk Level: MEDIUMCREDENTIALS_UNSAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [CREDENTIALS_UNSAFE]: Setup instructions in SKILL.md contain multiple hardcoded example credentials that are written directly to system configuration files using tee commands.
  • Evidence: RADIUS secret R4d1u5_S3cr3t_K3y!, LDAP service account password ServiceAccountPassword123!, and user password UserPassword123.
  • [CREDENTIALS_UNSAFE]: The auditing script scripts/agent.py defines a default SNMP community string of public, which is a widely recognized insecure default.
  • [COMMAND_EXECUTION]: The workflow relies heavily on sudo for system administration tasks, including installing packages, creating symbolic links in /etc/, and modifying service configuration files.
  • [EXTERNAL_DOWNLOADS]: The skill downloads a GPG signing key and adds a third-party APT repository from inverse.ca to install the PacketFence NAC software. While this is a well-known source for this specific utility, it involves executing remote configuration steps with high privileges.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 18, 2026, 04:43 PM