cali-ops-deploy-github-tailscale
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install Tailscale using their official installation script (
curl -fsSL https://tailscale.com/install.sh | sh). While this involves piping a remote script to a shell, it is targeting a well-known and reputable service provider's official domain. - [COMMAND_EXECUTION]: The skill provides various shell commands for server setup, user management (
adduser,usermod), and firewall configuration (ufw). These are standard administrative tasks for the skill's stated purpose of infrastructure deployment. - [COMMAND_EXECUTION]: The provided GitHub Actions workflow uses SSH to execute remote commands on the deployment server. The skill mitigates risks by recommending the use of the
command=restriction in the server'sauthorized_keysfile to limit the deploy user to specific Docker commands.
Audit Metadata