skills/alivirgo/major-ai-skills/nginx/Gen Agent Trust Hub

nginx

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute administrative shell commands such as nginx -t, nginx -s reload, and docker run to validate and apply server configurations. These are standard operational commands for the skill's stated purpose.
  • [DYNAMIC_EXECUTION]: The gpt.md file includes a Python automation script that uses the jinja2 library to generate Nginx configuration files from service definitions and executes them via subprocess.run. This creates a runtime configuration generation surface.
  • [INDIRECT_PROMPT_INJECTION]: The skill directs the agent to analyze Nginx access and error logs in gemini.md, which contain untrusted data from external web requests.
  • Ingestion points: Nginx access and error logs processed for diagnostics (gemini.md); service metadata used for configuration generation (gpt.md).
  • Boundary markers: No specific boundary markers or instructions to ignore embedded commands are present in the log analysis workflows.
  • Capability inventory: The skill possesses the capability to execute shell commands (nginx, docker), write to the file system (generate_vhost.py), and reload system services.
  • Sanitization: The provided Python script for configuration generation lacks explicit validation or escaping for input parameters like service names and domains before they are rendered into the Nginx configuration template.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 12:28 AM