analyzing-persistence-mechanisms-in-linux
Detect and analyze Linux persistence mechanisms including crontab entries, systemd service units, LD_PRELOAD hijacking, bashrc modifications, and authorized_keys backdoors using auditd and file integrity monitoring
52
58%
Does it follow best practices?
Impact
—
No eval scenarios have been run
Advisory
Suggest reviewing before use
Optimize this skill with Tessl
npx tessl skill review --optimize ./skills/analyzing-persistence-mechanisms-in-linux/SKILL.mdSecurity
2 findings — 2 medium severity. This skill can be installed but you should review these findings before use.
W011: Third-party content exposure detected (indirect prompt injection risk)
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
Third-party content exposure detected (high risk: 0.85). The skill reads outsider-authored free text from the target system’s files (e.g., user crontab entries via `crontab -l -u $u`, shell profile contents via `open(filepath).read()`, and `authorized_keys` lines via `open(auth_keys)`), and then includes those strings verbatim in the JSON report that is fed into the agent/LLM context.
W013: Attempt to modify system services in skill instructions
What this means
The skill prompts the agent to compromise the security or integrity of the user’s machine by modifying system-level services or configurations, such as obtaining elevated privileges, altering startup scripts, or changing system-wide settings.
Why it was flagged
Attempt to modify system services in skill instructions detected (high risk: 0.90). This skill explicitly requires root/sudo access and instructs inspection and remediation of persistence mechanisms (including systemd units, /etc/ld.so.preload, and SSH authorized_keys), which involves reading and potentially modifying system files and therefore can change/compromise the machine state.
- Repository
- mukul975/Anthropic-Cybersecurity-Skills
- Commit
0445030
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.