bt-site-ops
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from server logs and configuration files which could contain malicious payloads designed to influence the agent's behavior.
- Ingestion points: Reads files such as
/www/server/panel/vhost/nginx/<site>.confand/www/server/php/74/var/log/php-fpm.log. - Boundary markers: Includes a 'Quality Contract' that specifies a read-only default posture and output desensitization.
- Capability inventory: Possesses administrative shell access to run diagnostics and execute file modifications via
sedandsystemctl. - Sanitization: Instructions prohibit the collection or reporting of full credentials, tokens, or private keys.
- [COMMAND_EXECUTION]: The skill uses administrative shell commands to perform system diagnostics and remedial configuration changes.
- Evidence: Uses
sed -ito modify PHP-FPM configurations andfind ... -deletefor disk space management. These commands are integral to the skill's purpose and are regulated by the integrated safety workflow.
Audit Metadata