nginx
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute administrative shell commands such as
nginx -t,nginx -s reload, anddocker runto validate and apply server configurations. These are standard operational commands for the skill's stated purpose. - [DYNAMIC_EXECUTION]: The
gpt.mdfile includes a Python automation script that uses thejinja2library to generate Nginx configuration files from service definitions and executes them viasubprocess.run. This creates a runtime configuration generation surface. - [INDIRECT_PROMPT_INJECTION]: The skill directs the agent to analyze Nginx access and error logs in
gemini.md, which contain untrusted data from external web requests. - Ingestion points: Nginx access and error logs processed for diagnostics (
gemini.md); service metadata used for configuration generation (gpt.md). - Boundary markers: No specific boundary markers or instructions to ignore embedded commands are present in the log analysis workflows.
- Capability inventory: The skill possesses the capability to execute shell commands (
nginx,docker), write to the file system (generate_vhost.py), and reload system services. - Sanitization: The provided Python script for configuration generation lacks explicit validation or escaping for input parameters like service names and domains before they are rendered into the Nginx configuration template.
Audit Metadata