Linux Privilege Escalation
Fail
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [Unverifiable Dependencies & Remote Code Execution] (CRITICAL): The skill uses a piped command to execute a shell script from a remote, untrusted GitHub repository without any verification. Evidence:
curl -L https://github.com/carlospolop/PEASS-ng/releases/latest/download/linpeas.sh | sh. - [Privilege Escalation] (HIGH): The executed script, linpeas.sh, is a specialized tool used to discover and exploit privilege escalation vectors on Linux systems, indicating intent to compromise the host.
Recommendations
- CRITICAL: Downloads and executes remote code from untrusted source(s): https://github.com/carlospolop/PEASS-ng/releases/latest/download/linpeas.sh - DO NOT USE
- AI detected serious security threats
Audit Metadata