skills/clawic/skills/Caddy/Gen Agent Trust Hub

Caddy

Pass

Audited by Gen Agent Trust Hub on Nov 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for using the caddy command-line tool to perform standard operations such as configuration formatting (caddy fmt), validation (caddy validate), and zero-downtime reloads (caddy reload). These are routine administrative tasks for managing the service.
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the generation of web server configurations based on user-supplied data such as domain names and backend service addresses.
  • Ingestion points: User-provided parameters for Caddyfile site blocks and directives processed by the agent.
  • Boundary markers: None explicitly defined in SKILL.md to delimit user input from configuration templates.
  • Capability inventory: Execution of caddy CLI commands (validate, reload, adapt) and modification of configuration files mentioned in SKILL.md (e.g., /etc/caddy/Caddyfile).
  • Sanitization: SKILL.md advocates for using caddy validate and caddy adapt to check for syntax issues before applying changes, which serves as a functional validation step for the generated content.
  • [SAFE]: No malicious patterns, obfuscation, or unauthorized network activities were detected. All referenced resources, such as the vendor homepage and default certificate paths, are consistent with the documented purpose of managing a Caddy server.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 12, 2026, 08:23 AM