homelab-wireguard-vpn
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
sudofor administrative tasks such as package installation (apt), kernel parameter modification (sysctl), and service management (systemctl). These actions are standard and necessary for configuring a system-level VPN. - [EXTERNAL_DOWNLOADS]: Downloads the
wireguardpackage from official Linux repositories and usescurlto send IP updates to DuckDNS, a well-known dynamic DNS service. These operations are within the expected scope of the skill's purpose. - [CREDENTIALS_UNSAFE]: While the skill handles sensitive data like private keys and API tokens, it explicitly instructs users to avoid hardcoding them, use restrictive file permissions (
umask 077,chmod 600), and utilize environment files for secrets management.
Audit Metadata