daytona-cloud-server
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Executes repository-local shell scripts located in the
.devcontainerdirectory to initialize sandboxes and start services (MySQL, Den API, Worker Proxy). These scripts are intended for developer environment setup and validation. - [COMMAND_EXECUTION]: Uses the
daytona execcommand to retrieve and inspect log files from the server sandbox for health verification. - [INDIRECT_PROMPT_INJECTION]: The skill accepts user-defined URLs and branch names as arguments for setup scripts and health checks, creating a surface for indirect injection via untrusted inputs.
- Ingestion points: User-provided
<DEN_WEB_URL>,<DEN_API_URL>, and[branch-or-commit]arguments inSKILL.md. - Boundary markers: Absent.
- Capability inventory: Execution of
bashscripts anddaytona execcommands for environment control and log retrieval. - Sanitization: No explicit validation or sanitization of the input arguments is described in the prompt instructions.
Audit Metadata