homelab-pihole-dns
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the official Pi-hole installer from
https://install.pi-hole.netand the Cloudflare DoH proxy binary fromgithub.com/cloudflare/cloudflared. - [REMOTE_CODE_EXECUTION]: The skill instructs the user to download a shell script and a binary, then execute them. It specifically recommends reviewing the script content (
less pi-hole-install.sh) and verifying checksums for the binary before execution, which are standard safety measures. - [COMMAND_EXECUTION]: The skill uses administrative commands (
sudo,systemctl,chmod) to configure system settings, manage services, and set up Docker containers. These operations are consistent with the stated purpose of installing a network-wide DNS resolver. - [CREDENTIALS_UNSAFE]: The skill avoids hardcoding credentials, instead recommending the use of environment variables and
.envfiles with restricted permissions (chmod 600) to manage the Pi-hole web administrator password.
Audit Metadata