kubo-deploy-e2e
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on
docker composefor local container orchestration anddocker execto runipfs-cluster-ctlmanagement commands for health verification and peer status checks. - [EXTERNAL_DOWNLOADS]: The skill references official container images for Kubo, IPFS Cluster, and Caddy with specific pinned versions (
kubo v0.42.0,ipfs-cluster v1.1.6,caddy:2-alpine), which are standard and expected dependencies for the described infrastructure. - [PROMPT_INJECTION]: The skill contains a workflow for creating a local HTML file to verify the IPFS gateway's rendering capability, which represents an indirect prompt injection surface. This is a functional requirement for testing the cluster's intended purpose.
- Ingestion points: Creation of a
/tmp/demo.htmlfile within the SKILL.md instructions. - Boundary markers: None present.
- Capability inventory: Shell execution via
docker execandmake, network operations viacurl, and file system access. - Sanitization: None.
Audit Metadata