tunnel-doctor
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the official Tailscale installation script from the service's official website (tailscale.com).
- [REMOTE_CODE_EXECUTION]: Executes the Tailscale installation script by piping the download directly into a shell environment, which is the vendor's standard installation method.
- [COMMAND_EXECUTION]: Runs various system diagnostic tools including
route,netstat,ifconfig, andscutilto analyze network state. It also manages application lifecycles and service states to resolve configuration stalls. - [PRIVILEGE_ESCALATION]: Employs
sudofor necessary administrative tasks such as modifying system route tables, flushing the system DNS cache, and managing package installations. - [DATA_EXPOSURE]: Accesses local Shadowrocket configuration files to verify the liveness and connectivity of proxy nodes, with explicit instructions to avoid logging sensitive credential values.
Audit Metadata