wardlock-publish
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the Wardlock CLI installation script and binary via
curlandgo installfrom the developer's official GitHub repository and domain (CubieCode/wardlockandwardlock.nz). - [REMOTE_CODE_EXECUTION]: The installation process involves piping a remote script into the shell (
curl ... | sh), which is a standard deployment method for the associated tool and originates from the developer's verified resource. - [COMMAND_EXECUTION]: The skill makes extensive use of the
wardlockCLI to manage deployments, site policies, and sharing links. It specifies strict command formats, including the mandatory use of the--jsonflag for parseable output. - [INDIRECT_PROMPT_INJECTION]: The skill describes a workflow where content is downloaded from a remote server (
wardlock pull) into a temporary directory for the agent to modify and re-publish. This creates a surface where instructions embedded in the remote files could potentially influence the agent's behavior during the editing phase. - Ingestion points: The
wardlock pullcommand in the "Download a page" section downloads remote files into a localPULL_DIRfor processing. - Boundary markers: The instructions do not specify the use of clear delimiters or instructions to ignore embedded content when the agent modifies the pulled files.
- Capability inventory: The agent has the ability to read and edit local files, execute shell commands via the CLI, and upload modified content back to a remote server.
- Sanitization: There is no explicit requirement for the agent to sanitize or validate the content pulled from the remote server before performing modifications.
Audit Metadata