Caddy
Pass
Audited by Gen Agent Trust Hub on Nov 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for using the
caddycommand-line tool to perform standard operations such as configuration formatting (caddy fmt), validation (caddy validate), and zero-downtime reloads (caddy reload). These are routine administrative tasks for managing the service. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the generation of web server configurations based on user-supplied data such as domain names and backend service addresses.
- Ingestion points: User-provided parameters for
Caddyfilesite blocks and directives processed by the agent. - Boundary markers: None explicitly defined in
SKILL.mdto delimit user input from configuration templates. - Capability inventory: Execution of
caddyCLI commands (validate,reload,adapt) and modification of configuration files mentioned inSKILL.md(e.g.,/etc/caddy/Caddyfile). - Sanitization:
SKILL.mdadvocates for usingcaddy validateandcaddy adaptto check for syntax issues before applying changes, which serves as a functional validation step for the generated content. - [SAFE]: No malicious patterns, obfuscation, or unauthorized network activities were detected. All referenced resources, such as the vendor homepage and default certificate paths, are consistent with the documented purpose of managing a Caddy server.
Audit Metadata