daytona-electron-den
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell scripts (
test-server-on-daytona.shandtest-on-daytona.sh) located within the repository's.devcontainerdirectory to initialize test environments. - [COMMAND_EXECUTION]: It utilizes
daytona execto perform remote command execution on specified sandboxes and usescurlto perform health checks against provided URLs. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface (Category 8):
- Ingestion points: Processes data from user-provided URLs (
DEN_WEB_URL,DEN_API_URL) and reads content from system logs (/tmp/den-*.log). - Boundary markers: There are no explicit delimiters or instructions to ignore embedded commands when the agent processes the output from these external sources.
- Capability inventory: The agent has access to shell execution (
bash), remote sandbox execution (daytona exec), and network tools (curl). - Sanitization: No specific validation or sanitization of the external data is implemented before it is processed by the agent.
Audit Metadata