1panel-setup
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from 1Panel API responses (such as app lists and website names). It mitigates this risk via the operation-contract.md, which explicitly instructs the agent to treat all tool outputs as data rather than instructions.
- [EXTERNAL_DOWNLOADS]: The skill instructions direct the user to build a binary from a specific, pinned commit on the official 1Panel-dev GitHub repository, ensuring a verifiable and trusted supply chain for the integration.
- [COMMAND_EXECUTION]: Local Python scripts are referenced for building the project and configuring connections. The skill instructions mandate user oversight and verification of the binary's integrity and connection parameters before execution.
Audit Metadata