DGX Spark Sysadmin

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 11:22 AM UTC
• Version: 0.1.0

Overview

This is a disclosed DGX Spark remote administration guide with high-impact sysadmin actions, but it scopes them to authorized hosts and repeatedly requires user approval, recovery access, and rollback.

Install this only if you want an agent to help administer DGX Spark systems you control. Keep private keys and tokens out of prompts and logs, require explicit approval before reboots, updates, network changes, or GUI changes, and maintain an independent recovery path before using the disruptive procedures.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Tool Misuse: Tool Parameter Abuse, Chaining Abuse, Unsafe Defaults
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (23)

Credential Access

High

• Category: Privilege Escalation
• Confidence: 90% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 88)May include surrounding context.

bash

chmod 700 ~/.ssh
chmod 600 ~/.ssh/authorized_keys

Verify noninteractive access and intended sudo policy:

Chaining Abuse

High

• Category: Tool Misuse
• Confidence: 75% confidence

Finding

Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow.

Content

Scanner excerpt · SKILL.md (reported line 95)May include surrounding context.

bash

ssh -o BatchMode=yes -o ConnectTimeout=10 -i <ssh-key-path> \
  <admin-user>@<node-management-name> 'id; hostname; sudo -n true'

Before SSH configuration changes, keep an independent session and recovery path open. Inspect sudo sshd -T, back up the active configuration, run sudo sshd -t, then sudo systemctl reload ssh. Disable older authentication only after the replacement succeeds independently. Treat changed host keys as a security/reimage event; verify fingerprints out of band rather than deleting records blindly.

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 80% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 87)May include surrounding context.

Install only its public key through the trusted path. On each node:

bash

chmod 700 ~/.ssh
chmod 600 ~/.ssh/authorized_keys

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 80% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 88)May include surrounding context.

bash

chmod 700 ~/.ssh
chmod 600 ~/.ssh/authorized_keys

Verify noninteractive access and intended sudo policy:

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 91)May include surrounding context.

chmod 600 ~/.ssh/authorized_keys

text

Verify noninteractive access and intended sudo policy:

```bash
ssh -o BatchMode=yes -o ConnectTimeout=10 -i <ssh-key-path> \

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 95)May include surrounding context.

chmod 600 ~/.ssh/authorized_keys

text

Verify noninteractive access and intended sudo policy:

```bash
ssh -o BatchMode=yes -o ConnectTimeout=10 -i <ssh-key-path> \

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 98)May include surrounding context.

chmod 600 ~/.ssh/authorized_keys

text

Verify noninteractive access and intended sudo policy:

```bash
ssh -o BatchMode=yes -o ConnectTimeout=10 -i <ssh-key-path> \

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 178)May include surrounding context.

chmod 600 ~/.ssh/authorized_keys

text

Verify noninteractive access and intended sudo policy:

```bash
ssh -o BatchMode=yes -o ConnectTimeout=10 -i <ssh-key-path> \

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 289)May include surrounding context.

chmod 600 ~/.ssh/authorized_keys

text

Verify noninteractive access and intended sudo policy:

```bash
ssh -o BatchMode=yes -o ConnectTimeout=10 -i <ssh-key-path> \

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 290)May include surrounding context.

chmod 600 ~/.ssh/authorized_keys

text

Verify noninteractive access and intended sudo policy:

```bash
ssh -o BatchMode=yes -o ConnectTimeout=10 -i <ssh-key-path> \

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 291)May include surrounding context.

chmod 600 ~/.ssh/authorized_keys

text

Verify noninteractive access and intended sudo policy:

```bash
ssh -o BatchMode=yes -o ConnectTimeout=10 -i <ssh-key-path> \

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 292)May include surrounding context.

chmod 600 ~/.ssh/authorized_keys

text

Verify noninteractive access and intended sudo policy:

```bash
ssh -o BatchMode=yes -o ConnectTimeout=10 -i <ssh-key-path> \

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 306)May include surrounding context.

chmod 600 ~/.ssh/authorized_keys

text

Verify noninteractive access and intended sudo policy:

```bash
ssh -o BatchMode=yes -o ConnectTimeout=10 -i <ssh-key-path> \

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 327)May include surrounding context.

chmod 600 ~/.ssh/authorized_keys

text

Verify noninteractive access and intended sudo policy:

```bash
ssh -o BatchMode=yes -o ConnectTimeout=10 -i <ssh-key-path> \

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 354)May include surrounding context.

chmod 600 ~/.ssh/authorized_keys

text

Verify noninteractive access and intended sudo policy:

```bash
ssh -o BatchMode=yes -o ConnectTimeout=10 -i <ssh-key-path> \

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 363)May include surrounding context.

chmod 600 ~/.ssh/authorized_keys

text

Verify noninteractive access and intended sudo policy:

```bash
ssh -o BatchMode=yes -o ConnectTimeout=10 -i <ssh-key-path> \

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 364)May include surrounding context.

chmod 600 ~/.ssh/authorized_keys

text

Verify noninteractive access and intended sudo policy:

```bash
ssh -o BatchMode=yes -o ConnectTimeout=10 -i <ssh-key-path> \

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 365)May include surrounding context.

chmod 600 ~/.ssh/authorized_keys

text

Verify noninteractive access and intended sudo policy:

```bash
ssh -o BatchMode=yes -o ConnectTimeout=10 -i <ssh-key-path> \

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 366)May include surrounding context.

chmod 600 ~/.ssh/authorized_keys

text

Verify noninteractive access and intended sudo policy:

```bash
ssh -o BatchMode=yes -o ConnectTimeout=10 -i <ssh-key-path> \

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 367)May include surrounding context.

chmod 600 ~/.ssh/authorized_keys

text

Verify noninteractive access and intended sudo policy:

```bash
ssh -o BatchMode=yes -o ConnectTimeout=10 -i <ssh-key-path> \

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 177)May include surrounding context.

md

ip neigh show dev <fabric-interface>
sysctl net.ipv4.conf.all.rp_filter
sysctl net.ipv4.conf.<fabric-interface>.rp_filter
sudo nft list ruleset 2>/dev/null || true
sudo ufw status verbose 2>/dev/null || true
ip -s link show dev <fabric-interface>
ethtool -S <fabric-interface>

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 343)May include surrounding context.

md

ip neigh show dev <fabric-interface>
sysctl net.ipv4.conf.all.rp_filter
sysctl net.ipv4.conf.<fabric-interface>.rp_filter
sudo nft list ruleset 2>/dev/null || true
sudo ufw status verbose 2>/dev/null || true
ip -s link show dev <fabric-interface>
ethtool -S <fabric-interface>

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 394)May include surrounding context.

md

ip neigh show dev <fabric-interface>
sysctl net.ipv4.conf.all.rp_filter
sysctl net.ipv4.conf.<fabric-interface>.rp_filter
sudo nft list ruleset 2>/dev/null || true
sudo ufw status verbose 2>/dev/null || true
ip -s link show dev <fabric-interface>
ethtool -S <fabric-interface>

Static analysis

No suspicious patterns detected.