daytona-seeded-cloud-demo
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to manage development environments, including starting a server, seeding a database, and running a health-check loop. These are typical operations for the described task and are executed within the user's controlled environment.
- [CREDENTIALS_UNSAFE]: The skill contains hardcoded credentials (
alex@acme.test/OpenWorkDemo123!) and database connection strings (mysql://root:password@127.0.0.1:3306). These are explicitly documented as demo credentials for an "Acme Robotics" seed and are intended for a sandbox environment, not for accessing sensitive user data or production systems. Secrets likeDEN_DB_ENCRYPTION_KEYare also clearly marked withplease-changesuffixes, indicating they are placeholders. - [PERSISTENCE]: A local
nohuploop is initiated to keep the demo sandbox active by pinging a health endpoint every 30 minutes. This is a temporary process management technique for demo stability and does not attempt to persist across reboots or install backdoors. - [NO_CODE]: The skill primarily consists of shell instructions and does not bundle external scripts or binaries beyond what is already present in the user's local repository (
.devcontainer/test-server-on-daytona.sh).
Audit Metadata