Network 101
Warn
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONCREDENTIALS_UNSAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION] (HIGH): The skill requires administrative privileges to install packages and configure system services. It uses
sudoextensively for Linux setup andNew-NetFirewallRulefor Windows firewall changes. These are powerful capabilities that modify system security posture. - [CREDENTIALS_UNSAFE] (HIGH): Instructions include setting up SNMP with well-known community strings ('public' and 'private') and creating SMB shares with guest access ('guest ok = yes'). While appropriate for a learning lab, these configurations are highly insecure for production.
- [EXTERNAL_DOWNLOADS] (LOW): The skill automates the installation of services like Apache, SNMP, and Samba via the
aptpackage manager. This involves downloading code from external repositories. - [PROMPT_INJECTION] (LOW): The skill includes functionality to monitor and process web server logs, which constitutes an indirect prompt injection surface. 1. Ingestion points:
tailandgrepcommands are used on/var/log/apache2/access.log. 2. Boundary markers: None; external data from web requests is processed as raw text. 3. Capability inventory: The skill has the ability to execute commands withsudoand alter network configurations. 4. Sanitization: No sanitization or escaping is applied to the log content before processing.
Audit Metadata