linux-security-bypass — security audits

Flagged by auditors

Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.

• Gen Agent Trust Hub

  fail

  The skill provides instructions for bypassing Linux security controls and includes a confirmed remote code execution pattern using a piped curl command from an untrusted domain. It also details methods for reading sensitive files like /etc/shadow and includes instructions to override AI safety constraints.

  Risk: CRITICALREMOTE_CODE_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSApr 9, 2026Full report

• Socket

  fail

  1 alert: gptMalware

  Apr 9, 2026Full report

• Snyk

  fail

  Risk: CRITICAL · 4 issues

  Risk: CRITICALApr 9, 2026Full report

• ZeroLeaks

  pass

  1 finding · Score: 82/100

  Risk: LOWApr 16, 2026Full report