hydra-head-operator
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_CONTEXT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed specifically to execute shell commands related to the Hydra node and Cardano CLI. It utilizes
command-dispatch: toolwithdisable-model-invocation: true, which is a security feature to ensure that the AI model cannot autonomously generate or execute commands; instead, it acts as a gateway for user-provided commands. - [EXTERNAL_DOWNLOADS]: The
scripts/hydra-node.shscript executesdocker runusing an image fromghcr.io/cardano-scaling/hydra-node. This is an official repository for the Cardano Hydra project and is considered a safe, well-known source for this domain. - [DYNAMIC_CONTEXT_INJECTION]: The
SKILL.mdfrontmatter contains dynamic context markers (!hydra-node --versionand!hydra-node run --help) used to populate the agent's context with version and help information at load time. These are benign utility commands used for environment discovery. - [DATA_EXPOSURE]: The skill provides instructions for generating and handling sensitive cryptographic keys (
hydra.sk,cardano.sk). It correctly advises the user to set restrictive permissions (chmod 600) and warns never to share these files.
Audit Metadata