convex-domains
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns detected. The skill provides clear instructions for domain configuration using industry-standard tools.
- [COMMAND_EXECUTION]: Instructs the agent to utilize standard CLI tools from well-known providers (AWS Route53, Cloudflare flarectl, Google Cloud DNS, DigitalOcean doctl, and Vercel DNS) for DNS record creation. The skill explicitly enforces security boundaries: it forbids requesting credentials, mandates using only already-authenticated tools present on the system, and requires user confirmation before any command execution.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external DNS providers and domain names provided by the user. The instructions mitigate this potential attack surface by requiring human-in-the-loop confirmation of command strings and verification steps, such as using
digto confirm records are correctly set.
Audit Metadata