daytona-seeded-cloud-demo

Pass

Audited by Gen Agent Trust Hub on Jul 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes multiple shell commands to manage the demo environment, including running repository-local scripts (.devcontainer/test-server-on-daytona.sh), executing commands within a container (daytona exec), and performing health checks using curl.
  • [CREDENTIALS_UNSAFE]: Includes hardcoded credentials for a demo account (alex@acme.test / OpenWorkDemo123!) and placeholder secrets for database encryption and authentication (DEN_DB_ENCRYPTION_KEY, BETTER_AUTH_SECRET). These are explicitly intended for a transient demo environment as indicated by the 'acme.test' domain and the 'please-change' suffix in the secrets.
  • [COMMAND_EXECUTION]: Initiates a background keepalive loop using nohup and while true to prevent the Daytona sandbox from auto-stopping during the demo period.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 28, 2026, 12:26 PM
Security Audit — agent-trust-hub — daytona-seeded-cloud-demo