caddy-reverse-proxy
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of Caddy's administrative commands such as
caddy validate,caddy fmt, andcaddy reload. It also includes network diagnostic tools likecurl,openssl,nslookup, andssto verify backend connectivity and certificate status. - [PRIVILEGE_ESCALATION]: The troubleshooting and Docker patterns include examples of using
sudoto manageufwfirewall rules, which is necessary for allowing external traffic to host-bound services. - [EXTERNAL_DOWNLOADS]: The skill describes how to extend Caddy's functionality by building custom binaries with DNS plugins (e.g.,
github.com/caddy-dns/cloudflare) using thexcaddytool. These plugins are part of the official Caddy ecosystem and are considered standard dependencies for specific configurations like wildcard certificates.
Audit Metadata