Versioned security assessment
Report ID: SA-9E952417
7/23/2026, 6:05:41 AM
ir-velociraptor security assessment v9
Skill Security Certification Report
Scanner version 3.0.0 Audit model: codex Latest published report
- Skill name
- ir-velociraptor
- Version
- v0.1.0
- Maintainer
- AgentSecOps
- Coverage
- 13 Files scanned · 4,899 Lines analyzed
- Policy version
- skillstore-security-audit-policy-v1
Highest confirmed finding severity
Critical
8 confirmed security findings require attention.
Installation context
Check the current Skill page
This page summarizes report evidence only. The Skill page provides the canonical install advisory.
Open current Skill pageThis report does not block or authorize the manifest or ZIP.
Most static alerts are documentation syntax, placeholders, or read-only defensive queries. Confirmed risks include remote script execution, privileged deployment, broad network exposure, and sensitive temporary files. CI bypasses and insecure deployment examples require correction before publication.
Report position
Latest published report
Latest refers to the report sequence, not to artifact currentness.
Audit attestation
Active attestation
A public attestation is available for this exact report.
Human verification
Not verified
No human verification is recorded for this report.
Coverage
13 Files scanned · 4,899 Lines analyzed
42 items shown for review
Limitations
This report does not claim runtime or sandbox execution and does not prove the absence of side effects.
Evidence chain
Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.
Source
Commit and path bound
Artifact
Content and tree hashes bound
Audit
Complete
Capabilities observed
Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.
Contains scripts
May execute code included with the Skill.
Observed in 2 evidence locations
Network access
May connect to external services.
Observed in 49 evidence locations
Filesystem access
May read or write local files.
Observed in 2 evidence locations
Env variables
May read values from the process environment.
Observed in 20 evidence locations
External commands
May invoke commands or programs outside the Skill.
Observed in 50 evidence locations
Capability review items (34)
High
Git platform tokens
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
The workflow passes GITHUB_TOKEN to a third-party action while the workflow has write permissions. A compromised mutable action could misuse repository access.
High
PowerShell invocation
```powershell
The fenced PowerShell example installs and starts Velociraptor as a persistent Windows service. Following it performs real privileged endpoint modification.
High
sudo privilege escalation
sudo mv velociraptor-v0.72.3-linux-amd64 /usr/local/bin/velociraptor
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
sudo privilege escalation
sudo cat > /etc/systemd/system/velociraptor.service <<'EOF'
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
sudo privilege escalation
sudo useradd -r -s /bin/false velociraptor
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
sudo privilege escalation
sudo mkdir -p /etc/velociraptor /var/lib/velociraptor
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
sudo privilege escalation
sudo chown -R velociraptor:velociraptor /etc/velociraptor /var/lib/velociraptor
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
sudo privilege escalation
sudo systemctl daemon-reload
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
sudo privilege escalation
sudo systemctl enable velociraptor
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
sudo privilege escalation
sudo systemctl start velociraptor
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
sudo privilege escalation
sudo apt install certbot
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
sudo privilege escalation
sudo certbot certonly --standalone \
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
sudo privilege escalation
# Install: sudo dpkg -i velociraptor-client.deb
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
sudo privilege escalation
sudo cp velociraptor /usr/local/bin/
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
sudo privilege escalation
sudo cp client.config.yaml /etc/velociraptor/
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
sudo privilege escalation
sudo cat > /etc/systemd/system/velociraptor-client.service <<'EOF'
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
sudo privilege escalation
sudo systemctl enable velociraptor-client
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
sudo privilege escalation
sudo systemctl start velociraptor-client
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
sudo privilege escalation
sudo apt install nfs-kernel-server
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
sudo privilege escalation
sudo mkdir -p /export/velociraptor
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
sudo privilege escalation
sudo chown nobody:nogroup /export/velociraptor
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
sudo privilege escalation
sudo mount -t nfs nfs-server:/export/velociraptor /var/lib/velociraptor
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
sudo privilege escalation
sudo iptables -A INPUT -p tcp --dport 8000 -j ACCEPT
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
sudo privilege escalation
sudo iptables -A INPUT -p tcp --dport 8889 -s 10.0.0.0/8 -j ACCEPT
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
sudo privilege escalation
sudo iptables -A INPUT -p tcp --dport 8889 -j DROP
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
sudo privilege escalation
sudo iptables-save > /etc/iptables/rules.v4
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
Medium
Hardcoded IP address
bind_address: 0.0.0.0
The example binds the API to every interface. Without a separate access control, administrative functions may be reachable from unintended networks.
Medium
Hardcoded IP address
bind_address: 0.0.0.0
The example binds the management GUI to every interface. This broad exposure increases authentication and web attack surface.
Medium
Hardcoded IP address
bind_address: 0.0.0.0
The frontend listens on every interface to accept clients. The deployment must constrain exposure with tested firewall and TLS controls.
Medium
Hardcoded IP address
/export/velociraptor 10.0.1.0/24(rw,sync,no_subtree_check,no_root_squash)
The NFS example hardcodes a trusted subnet and combines it with no_root_squash. A compromised client in that range can obtain root-level file access.
Medium
Hardcoded IP address
sudo iptables -A INPUT -p tcp --dport 8889 -s 10.0.0.0/8 -j ACCEPT
The firewall example trusts the entire 10.0.0.0/8 range for GUI access. That range may be much broader than the intended management network.
Medium
Temp directory access
config client > /tmp/client.config.yaml
The guide writes generated client configuration into a shared temporary directory. Weak permissions or local races could expose or replace sensitive configuration.
Low
Hardcoded URL
curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
The external URL supplies a script that is executed immediately by Bash. Trust in the remote branch and delivery path is security-critical.
Low
Hardcoded URL
wget https://github.com/Velocidex/velociraptor/releases/download/v0.72/velociraptor-v0.72.3-linux-am
The guide downloads an executable for privileged installation without checksum or signature verification. A replaced release artifact could gain root execution.
Risk findings
Confirmed security concerns are separated from items that still need review.
Confirmed security concerns (8)
RISK-001 Critical
Pipe to shell pattern
curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
The CI template downloads a mutable remote script and pipes it directly to Bash. A compromised source can execute arbitrary code on the runner.
RISK-002 High
Systemd service enablement
sudo systemctl enable velociraptor
The guide enables a persistent Velociraptor service at system startup. This changes host persistence and expands the impact of a compromised binary or configuration.
RISK-003 High
Systemd service enablement
sudo systemctl enable velociraptor-client
The guide enables a persistent Velociraptor service at system startup. This changes host persistence and expands the impact of a compromised binary or configuration.
RISK-004 High
assets/ci-config-template.yml:54-61assets/ci-config-template.yml:116-128assets/ci-config-template.yml:228-235
Security scan failures are suppressed
The CI template appends success fallbacks to several scanners. Tool failures and some findings can pass without an enforced security gate.
The template visibly uses success fallbacks after Semgrep, Safety, npm audit, and Checkov commands. Several jobs lack a reliable later failure check.
RISK-005 High
Privileged binary installation lacks integrity verification
The deployment guide downloads a Velociraptor executable and moves it into a privileged executable path without verifying a checksum or signature.
The displayed sequence performs wget, chmod, and sudo mv. No integrity verification appears between download and privileged installation.
RISK-006 High
Mutable CI action can execute upstream changes
The CI template runs the Trivy action from its mutable master branch. Future upstream changes can execute in repository workflows without review.
The action reference is explicitly aquasecurity/trivy-action@master. A branch is mutable and does not provide immutable supply-chain pinning.
RISK-007 High
NFS evidence store disables root squashing
The NFS example exports the evidence datastore with no_root_squash. A compromised root client can write files as root on the server.
The export option no_root_squash is explicit on line 385. This removes a standard NFS protection for remote root users.
RISK-008 High
Malware sample handling lacks isolation controls
The ransomware workflow directs analysts to extract binary samples without specifying quarantine, encrypted packaging, or isolated analysis requirements.
The workflow explicitly requests ransomware binary extraction. The surrounding steps do not state containment controls for handling executable malware samples.
Remediation
Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.
- FIX-001CriticalRemote scripts and binaries execute without integrity verification.Pin exact versions, download files separately, verify published signatures or checksums, and execute only after successful validation.
- FIX-002HighCI scanners can fail without failing the workflow.Remove unconditional success fallbacks, handle scanner errors separately from findings, and enforce documented severity thresholds.
- FIX-003HighA CI action uses a mutable branch and other actions use mutable tags.Pin every third-party action to a reviewed commit SHA and use an automated process for controlled updates.
- FIX-004HighThe NFS export disables root squashing for the evidence datastore.Remove no_root_squash, restrict clients to a narrow network, apply least privilege, and protect evidence with immutable backups.
- FIX-005HighDeployment guidance performs privileged and persistent host changes.Require explicit confirmation, document rollback steps, verify configurations, and test service and firewall changes in an isolated environment.
- FIX-006HighRansomware sample extraction lacks containment guidance.Require isolated analysis systems, encrypted archives, access controls, malware labeling, and documented custody before sample extraction.
- FIX-007MediumGenerated client configuration is written to a shared temporary path.Create a private directory with restrictive permissions, write atomically, and delete the configuration securely after deployment.
Expert evidence
Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.
Artifact subject
- Marketplace commit
- 9e952417e76879bc9d853e1b8b2cd6d6d8d4a1c2
- Content hash
- 0d73e6e09f7b5e3270508e6dda90e2711205f8859ff78db6361642eca73666b4
- Tree hash
- 1439b1d2ab974f820924d76d6af755d2dcce6da9e8f5ecaf9aaeb61f90e8f3f2
- Skill path
- skills/agentsecops/ir-velociraptor
- Audit payload hash
- bb158545e29bbb6e2446e8c6aefce6b6
Analysis metadata
Audit model: codex
Analysis state: Complete
Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.
Verify and export
The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.
Audit attestation: active