Caveat verdict
linux-security-guardian
Receives external input AND executes processes
Autonomous Linux server security management skill via SSH MCP that runs CVE scans (CISA KEV, OSV.dev, NVD API) and applies non-breaking hardening automatically while requiring owner confirmation for critical changes; all behavior matches stated security audit purpose.
Automated static analysis — not a human review. Caveat flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
What it does
These are capability combinations: each listed behavior occurs in the skill, but Caveat detects co-occurrence — it does not verify that one flows into another. Read the code to confirm a live chain.
Receives external input AND executes processes — the shape of a command & control channel
LLM05 · LLM06 · ASI10
Executes processes AND makes external network calls — may exfiltrate command output
LLM02 · LLM06 · ASI03
Findings (7)
Accesses sensitive system files
audit/modules/02-users.md · code · /etc/passwd
Pipe to python — executes piped content as Python code
audit/modules/15-docker.md · code · | python3
References sudo — requests elevated privileges
audit/modules/02-users.md · code · Sudo
apt-get install — installs system packages
audit/modules/07-cve.md · code · apt-get install
Possible hardcoded credential
cve/cve-scan.sh · prose · downgraded · API_KEY="${NVD_API_KEY:-}
Accesses .ssh directory
core-extra/config/profile.md · prose · downgraded · .ssh/
Sets world-executable permissions
audit/modules/10-filesystem.md · prose · downgraded · chmod 1777
Why the tier is capped
Execution sink present in raw bytes (Hard Floor: class B). Final tier capped at Caution — cannot be lifted by any downgrade, example-payload opt-in, or allowlist.
Permissions & capabilities
Requires 10 system binaries. (1 elevated: curl).
network_inprocess_execnetwork_out Thanks — recorded.