naver-cloud-vpn
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/naver_vpn.pyinvokes system tools likecodesignandopenvpnusing safe subprocess calls with argument lists. All executable paths are either hardcoded to the official application bundle or strictly validated. - [PRIVILEGE_ESCALATION]: VPN operations utilize
sudowith the non-interactive flag. This ensures the AI agent cannot prompt for or capture the user's password, requiring the user to have already authorizedsudoin a separate terminal session. - [SAFE]: The skill enforces a security-first posture by validating that configuration files are owned by the current user with restricted permissions (0600) and by auditing the VPN app's Team ID and Bundle ID to prevent binary impersonation.
Audit Metadata