Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward RPM repository management reference, with some destructive cleanup examples that users should verify before running.
Install only if you need RPM repository management help. Before using any deletion examples, list the target files first, confirm the repository path, keep backups, and avoid running wildcard or recursive remove commands on substituted paths without review.
The skill presents a forceful recursive deletion command using an absolute path without safeguards. In an agent setting, if the repository path is user-supplied, templated incorrectly, or empty due to variable expansion failure, the command can be abused to delete arbitrary directories on the host.
# 清理并重新生成
# Clean and regenerate
rm -rf /path/to/repo/repodata
createrepo /path/to/repo
# 验证元数据
The skill presents a forceful recursive deletion command using an absolute path without safeguards. In an agent setting, if the repository path is user-supplied, templated incorrectly, or empty due to variable expansion failure, the command can be abused to delete arbitrary directories on the host.
# 清理并重新生成
# Clean and regenerate
rm -rf /path/to/repo/repodata
createrepo /path/to/repo
# 验证元数据
The example deletes files via a wildcarded absolute path with no preview or confirmation step. If the path or glob is broader than intended, an operator or agent could remove many packages unexpectedly, causing repository corruption or service disruption.
rm /path/to/repo/Packages/conflicting-*.rpm createrepo --update /path/to/repo
The skill includes a destructive deletion command for repository metadata without any warning to verify the target path or note that the operation is irreversible. In an agent skill context, examples are likely to be copied or parameterized automatically, so a wrong path expansion could delete unintended directories and disrupt package distribution.
The package removal example permanently deletes RPMs from the repository but does not warn about data loss or advise validating the glob pattern. In repository management, an overbroad wildcard or incorrect path can remove large sets of packages and break consumers relying on the repo.
No suspicious patterns detected.