daytona-seeded-cloud-demo

Pass

Audited by Gen Agent Trust Hub on Sep 3, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands to manage development environments, including starting a server, seeding a database, and running a health-check loop. These are typical operations for the described task and are executed within the user's controlled environment.
  • [CREDENTIALS_UNSAFE]: The skill contains hardcoded credentials (alex@acme.test / OpenWorkDemo123!) and database connection strings (mysql://root:password@127.0.0.1:3306). These are explicitly documented as demo credentials for an "Acme Robotics" seed and are intended for a sandbox environment, not for accessing sensitive user data or production systems. Secrets like DEN_DB_ENCRYPTION_KEY are also clearly marked with please-change suffixes, indicating they are placeholders.
  • [PERSISTENCE]: A local nohup loop is initiated to keep the demo sandbox active by pinging a health endpoint every 30 minutes. This is a temporary process management technique for demo stability and does not attempt to persist across reboots or install backdoors.
  • [NO_CODE]: The skill primarily consists of shell instructions and does not bundle external scripts or binaries beyond what is already present in the user's local repository (.devcontainer/test-server-on-daytona.sh).
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 3, 2026, 11:42 AM