agent-network-single-node
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the getcolors/agent-network repository for implementation details and recommends using the official lego binary for DNS-01 challenges, including instructions for checksum verification. These are standard references for the skill's purpose.
- [COMMAND_EXECUTION]: The documentation describes administrative commands for the NetBird stack, such as netbird-server admin token create and docker compose exec. It also provides iptables rules for establishing network isolation boundaries. These commands are descriptive and intended for the user to implement the network architecture.
- [PRIVILEGE_ESCALATION]: The skill mentions the requirement of NET_ADMIN capabilities and /dev/net/tun access for Docker containers to facilitate WireGuard overlay networking. It also details the use of the DOCKER-USER iptables chain to enforce subnet isolation, which requires administrative privileges to configure. These are necessary technical requirements for the described network stack.
- [PERSISTENCE]: The skill recommends using a systemd unit with PartOf=docker.service to ensure that custom firewall rules are re-applied when the Docker service restarts. This is a documented method for maintaining configuration state for the firewall, rather than a malicious persistence mechanism.
Audit Metadata