certbot
Warn
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: MEDIUMPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONDATA_EXFILTRATIONPERSISTENCE
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill instructs the agent to use
sudofor high-privileged operations including package installation and system configuration. - Evidence:
sudo snap install --classic certbotin SKILL.md - Evidence:
sudo certbot --nginxin SKILL.md - [DATA_EXFILTRATION]: The skill references file paths that commonly contain sensitive DNS API tokens or credentials.
- Evidence:
~/.secrets/cloudflare.iniin SKILL.md - Evidence:
/etc/letsencrypt/cloudflare.iniin SKILL.md - [COMMAND_EXECUTION]: The skill provides various shell commands for certificate management and system linking.
- Evidence:
sudo ln -s /snap/bin/certbot /usr/bin/certbotin SKILL.md - [PERSISTENCE]: The skill describes the use of system timers and cron jobs to ensure long-term automated operations.
- Evidence: Mentions of
cronandsystemd timersfor automatic certificate renewal in SKILL.md
Audit Metadata