kubo-deploy-e2e

Pass

Audited by Gen Agent Trust Hub on Jul 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill relies on docker compose for local container orchestration and docker exec to run ipfs-cluster-ctl management commands for health verification and peer status checks.
  • [EXTERNAL_DOWNLOADS]: The skill references official container images for Kubo, IPFS Cluster, and Caddy with specific pinned versions (kubo v0.42.0, ipfs-cluster v1.1.6, caddy:2-alpine), which are standard and expected dependencies for the described infrastructure.
  • [PROMPT_INJECTION]: The skill contains a workflow for creating a local HTML file to verify the IPFS gateway's rendering capability, which represents an indirect prompt injection surface. This is a functional requirement for testing the cluster's intended purpose.
  • Ingestion points: Creation of a /tmp/demo.html file within the SKILL.md instructions.
  • Boundary markers: None present.
  • Capability inventory: Shell execution via docker exec and make, network operations via curl, and file system access.
  • Sanitization: None.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 1, 2026, 08:38 AM
Security Audit — agent-trust-hub — kubo-deploy-e2e