tunnel-doctor

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the official Tailscale installation script from the service's official website (tailscale.com).
  • [REMOTE_CODE_EXECUTION]: Executes the Tailscale installation script by piping the download directly into a shell environment, which is the vendor's standard installation method.
  • [COMMAND_EXECUTION]: Runs various system diagnostic tools including route, netstat, ifconfig, and scutil to analyze network state. It also manages application lifecycles and service states to resolve configuration stalls.
  • [PRIVILEGE_ESCALATION]: Employs sudo for necessary administrative tasks such as modifying system route tables, flushing the system DNS cache, and managing package installations.
  • [DATA_EXPOSURE]: Accesses local Shadowrocket configuration files to verify the liveness and connectivity of proxy nodes, with explicit instructions to avoid logging sensitive credential values.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 04:05 AM