cpanel-domain
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using the
cpanelCLI tool to list, add, and delete domains, subdomains, and addon domains. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user data (domain names, subdomain names, and document root paths) and interpolates them directly into shell commands.
- Ingestion points: User-provided arguments for subdomains, domains, and file paths in
SKILL.md. - Boundary markers: None present to delimit user input from shell command structures.
- Capability inventory: The skill uses
cpanelanduapiCLI tools which interact with the hosting server configuration. - Sanitization: There are no explicit instructions for the agent to sanitize or validate the domain strings or paths before command execution.
Audit Metadata