tailscale
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the official installation script from Tailscale's primary domain.
- Evidence:
curl -fsSL https://tailscale.com/install.shinSKILL.md. - [REMOTE_CODE_EXECUTION]: The skill executes the downloaded Tailscale installation script by piping it directly to the shell.
- Evidence:
curl -fsSL https://tailscale.com/install.sh | shinSKILL.md. - [COMMAND_EXECUTION]: The skill uses shell scripts to perform network configuration and service management.
- Evidence: Execution of
tailscale up,tailscale netcheck, andtailscale pingacross all files. - [PRIVILEGE_ESCALATION]: The skill uses
sudoto modify system-level networking parameters and install software. - Evidence:
sudo tee /etc/sysctl.d/99-tailscale.confandsudo sysctl -pused to enablenet.ipv4.ip_forwardinSKILL.md. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and triage diagnostic data from Tailscale command outputs, which could potentially contain attacker-controlled content if the network environment is compromised.
- Ingestion points:
tailscale status,tailscale netcheck, andtailscale pingoutput inSKILL.mdandgemini.md. - Boundary markers: Not explicitly defined in instructions.
- Capability inventory: Shell command execution and system configuration via
sudoinSKILL.md. - Sanitization: No explicit sanitization of command output is documented.
Audit Metadata