daytona-flow-validator
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands within a sandbox environment using the
daytona exectool to perform system checks, read logs, and automate desktop interactions. - [EXTERNAL_DOWNLOADS]: The skill uses
sudo apt-getto install standard Linux automation utilities (xdotoolandwmctrl) when they are not present in the environment. - [COMMAND_EXECUTION]: Automated UI interactions are performed using
xdotoolto simulate user input, such as typing file paths and navigating native Linux dialogs. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from web pages and application states via
browser_snapshotandbrowser_eval, which is then used to drive subsequent agent actions. Evidence Chain: 1. Ingestion points:browser_snapshot,browser_eval, anddocument.body.innerTextin SKILL.md. 2. Boundary markers: None identified. 3. Capability inventory: Shell command execution viadaytona exec, browser interaction tools (browser_click,browser_fill). 4. Sanitization: No explicit content sanitization or validation of external UI text is mentioned.
Audit Metadata