ssh-essentials
Pass
Audited by Gen Agent Trust Hub on Feb 18, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION] (SAFE): The skill references sensitive file paths such as
~/.ssh/id_rsaand~/.ssh/config. These references are strictly educational, demonstrating standard SSH identity management and permission hardening practices (e.g.,chmod 600). No automated data collection or external exfiltration logic is present. - [COMMAND_EXECUTION] (SAFE): Numerous shell command templates for
ssh,scp, andrsyncare provided. These are documented for user reference and lack any obfuscated, dynamic, or malicious execution triggers. - [CREDENTIALS_UNSAFE] (SAFE): No hardcoded secrets, API keys, or private tokens were found. The skill correctly uses placeholders like
your_email@example.comanduser@hostnamefor demonstration purposes. - [Persistence Mechanisms] (SAFE): The documentation explains how to add public keys to
authorized_keys. While this technique can be used for persistence, it is presented here as a standard security best practice for establishing secure, key-based authentication.
Audit Metadata