Network 101

Warn

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONCREDENTIALS_UNSAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION] (HIGH): The skill requires administrative privileges to install packages and configure system services. It uses sudo extensively for Linux setup and New-NetFirewallRule for Windows firewall changes. These are powerful capabilities that modify system security posture.
  • [CREDENTIALS_UNSAFE] (HIGH): Instructions include setting up SNMP with well-known community strings ('public' and 'private') and creating SMB shares with guest access ('guest ok = yes'). While appropriate for a learning lab, these configurations are highly insecure for production.
  • [EXTERNAL_DOWNLOADS] (LOW): The skill automates the installation of services like Apache, SNMP, and Samba via the apt package manager. This involves downloading code from external repositories.
  • [PROMPT_INJECTION] (LOW): The skill includes functionality to monitor and process web server logs, which constitutes an indirect prompt injection surface. 1. Ingestion points: tail and grep commands are used on /var/log/apache2/access.log. 2. Boundary markers: None; external data from web requests is processed as raw text. 3. Capability inventory: The skill has the ability to execute commands with sudo and alter network configurations. 4. Sanitization: No sanitization or escaping is applied to the log content before processing.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 17, 2026, 06:04 PM