amd-skills@6916fb3

CAUTION

Publisher claims: "AMD's verified Agent Skills in one plugin: route image/audio through local AI on Ryzen AI, serve LLMs on AMD Instinct GPUs with vLLM, optimize inference throughput with Hyperloom, and analyze GPU kernel and PyTorch trace performance." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Claude Code plugin marketplacePublisher amd · joined 0 days agoInstalls 0Last detonated 55 min ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Privileged sudo commandserving-llms-on-instinct/scripts/detect.py:109 · Privileged sudo command — agent may execute with elevated privileges

AST05

CRITICAL

Privileged sudo commandserving-llms-on-instinct/scripts/detect.py:69 · Privileged sudo command — agent may execute with elevated privileges

AST05

CRITICAL

Prompt injectionlemonade-router-builder/SKILL.md:142 · Prompt injection — known jailbreak technique reference

AST01

CRITICAL

Privileged sudo commandserving-llms-on-epyc/reference.md:78 · Privileged sudo command — agent may execute with elevated privileges

AST05

HIGH

Access to sensitive file pathshyperloom-workload-optimizer/scripts/_env.sh:24 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathshyperloom-workload-optimizer/scripts/_env.sh:27 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Prompt injectionlemonade-router-builder/examples.md:126 · Prompt injection — known jailbreak technique reference

AST01

CRITICAL

Privileged sudo commandserving-llms-on-instinct/scripts/detect.py:70 · Privileged sudo command — agent may execute with elevated privileges

AST05

CRITICAL

Privileged sudo commandlocal-ai-use/scripts/setup_local_ai.py:114 · Privileged sudo command — agent may execute with elevated privileges

AST05

CRITICAL

Privileged sudo commandlocal-ai-use/SKILL.md:153 · Privileged sudo command — agent may execute with elevated privileges

AST05

CRITICAL

Privileged sudo commandserving-llms-on-epyc/reference.md:72 · Privileged sudo command — agent may execute with elevated privileges

AST05

HIGH

Access to sensitive file pathshyperloom-workload-optimizer/SKILL.md:111 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathshyperloom-workload-optimizer/SKILL.md:67 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathshyperloom-workload-optimizer/SKILL.md:140 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Process kill commandhyperloom-workload-optimizer/scripts/tests/test_launch_flow.sh:20 · Process kill command — agent can terminate processes

AST05

HIGH

Access to sensitive file pathshyperloom-workload-optimizer/SKILL.md:69 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

File permission modification commandhyperloom-workload-optimizer/scripts/tests/test_launch_flow.sh:79 · File permission modification command — agent changes file ownership/permissions

AST05

CRITICAL

Privileged sudo commandserving-llms-on-epyc/reference.md:71 · Privileged sudo command — agent may execute with elevated privileges

AST05

CRITICAL

Privileged sudo commandserving-llms-on-instinct/scripts/validate.py:79 · Privileged sudo command — agent may execute with elevated privileges

AST05

CRITICAL

Prompt injectionlemonade-router-builder/examples.md:93 · Prompt injection — known jailbreak technique reference

AST01

CRITICAL

Privileged sudo commandlocal-ai-use/SKILL.md:140 · Privileged sudo command — agent may execute with elevated privileges

AST05

CRITICAL

Privileged sudo commandserving-llms-on-instinct/scripts/validate.py:114 · Privileged sudo command — agent may execute with elevated privileges

AST05

CRITICAL

Privileged sudo commandserving-llms-on-epyc/scripts/validate.py:161 · Privileged sudo command — agent may execute with elevated privileges

AST05

CRITICAL

Privileged sudo commandserving-llms-on-instinct/reference.md:92 · Privileged sudo command — agent may execute with elevated privileges

AST05

CRITICAL

Privileged sudo commandlocal-ai-use/scripts/setup_local_ai.py:116 · Privileged sudo command — agent may execute with elevated privileges

AST05

CRITICAL

Privileged sudo commandserving-llms-on-instinct/scripts/validate.py:90 · Privileged sudo command — agent may execute with elevated privileges

AST05

CRITICAL

Privileged sudo commandserving-llms-on-instinct/SKILL.md:344 · Privileged sudo command — agent may execute with elevated privileges

AST05

CRITICAL

Privileged sudo commandlocal-ai-use/SKILL.md:34 · Privileged sudo command — agent may execute with elevated privileges

AST05

HIGH

Access to sensitive file pathshyperloom-workload-optimizer/SKILL.md:59 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Python subprocess execution detectedhyperloom-workload-optimizer/scripts/preflight.py:173 · Python subprocess execution detected

AST05

CRITICAL

Privileged sudo commandlocal-ai-use/SKILL.md:101 · Privileged sudo command — agent may execute with elevated privileges

AST05

CRITICAL

Privileged sudo commandserving-llms-on-instinct/scripts/validate.py:122 · Privileged sudo command — agent may execute with elevated privileges

AST05

HIGH

Access to sensitive file pathshyperloom-workload-optimizer/scripts/_env.sh:7 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Prompt injectionlemonade-router-builder/SKILL.md:10 · Prompt injection — known jailbreak technique reference

AST01

CRITICAL

Privileged sudo commandlocal-ai-use/scripts/setup_local_ai.py:117 · Privileged sudo command — agent may execute with elevated privileges

AST05

CRITICAL

Privileged sudo commandlocal-ai-use/scripts/setup_local_ai.py:118 · Privileged sudo command — agent may execute with elevated privileges

AST05

CRITICAL

Privileged sudo commandlocal-ai-use/scripts/setup_local_ai.py:352 · Privileged sudo command — agent may execute with elevated privileges

AST05

CRITICAL

Fake instruction boundary tagserving-llms-on-instinct/SKILL.md:281 · Fake instruction boundary tag

AST01

HIGH

Access to sensitive file pathshyperloom-workload-optimizer/scripts/_env.sh:23 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Process kill commandlocal-ai-app-integration/SKILL.md:282 · Process kill command — agent can terminate processes

AST05

HIGH

Python subprocess execution detectedlocal-ai-app-integration/SKILL.md:257 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedserving-llms-on-instinct/evals/hooks.py:38 · Python subprocess execution detected

AST05

HIGH

Access to sensitive file pathshyperloom-workload-optimizer/scripts/tests/test_launch_flow.sh:92 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathshyperloom-workload-optimizer/setup.md:70 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Instructs the agent to modify its persistent memory or instruction fileslocal-ai-use/evals/evals.json:10 · Instructs the agent to modify its persistent memory or instruction files

AST01

HIGH

Outbound HTTP to raw IP addresslocal-ai-app-integration/reference.md:370 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addresslocal-ai-app-integration/reference.md:319 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Access to sensitive file pathshyperloom-workload-optimizer/setup.md:59 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Process kill commandserving-llms-on-epyc/SKILL.md:290 · Process kill command — agent can terminate processes

AST05

HIGH

Python subprocess execution detectedserving-llms-on-epyc/scripts/detect.py:42 · Python subprocess execution detected

AST05

HIGH

Access to sensitive file pathshyperloom-workload-optimizer/setup.md:13 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Python subprocess execution detectedserving-llms-on-instinct/evals/hooks.py:70 · Python subprocess execution detected

AST05

HIGH

Access to sensitive file pathshyperloom-workload-optimizer/scripts/tests/test_launch_flow.sh:82 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathshyperloom-workload-optimizer/setup.md:69 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Instructs the agent to modify its persistent memory or instruction fileslocal-ai-use/scripts/setup_local_ai.py:457 · Instructs the agent to modify its persistent memory or instruction files

AST01

HIGH

Python subprocess execution detectedserving-llms-on-instinct/scripts/detect.py:44 · Python subprocess execution detected

AST05

HIGH

Outbound HTTP to raw IP addresslocal-ai-app-integration/SKILL.md:298 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Access to sensitive file pathshyperloom-workload-optimizer/scripts/tests/test_launch_flow.sh:93 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Python subprocess execution detectedserving-llms-on-epyc/scripts/cpu_tune.py:53 · Python subprocess execution detected

AST05

HIGH

Process kill commandlocal-ai-app-integration/reference.md:282 · Process kill command — agent can terminate processes

AST05

HIGH

Instructs the agent to modify its persistent memory or instruction fileslocal-ai-use/SKILL.md:226 · Instructs the agent to modify its persistent memory or instruction files

AST01

HIGH

Outbound HTTP to raw IP addresslocal-ai-app-integration/SKILL.md:315 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Access to sensitive file pathshyperloom-workload-optimizer/setup.md:61 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Python subprocess execution detectedlocal-ai-use/scripts/setup_local_ai.py:190 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedserving-llms-on-instinct/scripts/detect.py:32 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedlemonade-router-builder/scripts/validate.py:119 · Python subprocess execution detected

AST05

HIGH

Outbound HTTP to raw IP addresslocal-ai-app-integration/SKILL.md:289 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Python subprocess execution detectedlocal-ai-use/scripts/setup_local_ai.py:256 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedlocal-ai-app-integration/reference.md:304 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedserving-llms-on-epyc/scripts/check_model.py:177 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedserving-llms-on-epyc/scripts/validate.py:57 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedserving-llms-on-epyc/scripts/detect.py:49 · Python subprocess execution detected

AST05

HIGH

Outbound HTTP to raw IP addresslocal-ai-app-integration/SKILL.md:325 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addresslocal-ai-app-integration/SKILL.md:326 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

File type combined with upload actiontracelens-analysis-orchestrator/reference.md:262 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

URL using raw IP addresslocal-ai-app-integration/SKILL.md:298 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

File type combined with upload actionlocal-ai-app-integration/reference.md:201 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

Python subprocess execution detectedserving-llms-on-instinct/scripts/sync_recipes.py:58 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedserving-llms-on-instinct/scripts/validate.py:45 · Python subprocess execution detected

AST05

MEDIUM

File type combined with upload actiontracelens-analysis-orchestrator/reference.md:312 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actiontracelens-analysis-orchestrator/agents/multi-kernel-analyzer.md:33 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

URL using raw IP addresslocal-ai-app-integration/SKILL.md:315 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addresslocal-ai-app-integration/SKILL.md:325 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Python subprocess execution detectedserving-llms-on-instinct/scripts/sync_recipes.py:117 · Python subprocess execution detected

AST05

MEDIUM

File type combined with upload actiontracelens-analysis-orchestrator/reference.md:313 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

URL using raw IP addresslocal-ai-app-integration/SKILL.md:326 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

File type combined with upload actiontracelens-analysis-orchestrator/templates/analysis_template.md:135 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actionmagpie-kernel-evaluator/reference.md:151 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actiontracelens-analysis-orchestrator/agents/kernel-fusion-analyzer.md:30 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actiontracelens-analysis-orchestrator/agents/moe-analyzer.md:88 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

URL using raw IP addresslocal-ai-app-integration/reference.md:370 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

File type combined with upload actionmagpie-kernel-evaluator/reference.md:112 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

Python subprocess execution detectedserving-llms-on-instinct/scripts/validate.py:33 · Python subprocess execution detected

AST05

MEDIUM

URL using raw IP addresslocal-ai-app-integration/reference.md:319 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

File type combined with upload actionmagpie-kernel-evaluator/SKILL.md:108 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

URL using raw IP addresslocal-ai-app-integration/SKILL.md:289 · URL using raw IP address — may bypass domain-based filtering

AST07