rybbit-single-node
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill was analyzed across all threat categories and no security issues or malicious patterns were found. It functions as an educational resource for DevOps tasks.
- [COMMAND_EXECUTION]: The skill provides instructions for executing administrative commands via Ansible and OpenTofu to provision and manage servers. These commands are intended for the user's infrastructure and follow standard deployment workflows.
- [DATA_EXFILTRATION]: There is no evidence of unauthorized data exfiltration. The skill identifies and provides guidance for handling sensitive data like SSH keys and environment files locally on the provisioned host.
- [EXTERNAL_DOWNLOADS]: The skill references Docker images from the GitHub Container Registry (GHCR) and a configuration repository on GitHub. These resources are from established sources (the Rybbit project and the skill author's repository) and are used for their intended purpose in the software stack.
- [INDIRECT_PROMPT_INJECTION]: The skill handles data from external tools (like API and database outputs). It includes specific defensive measures such as validating extracted IDs and using SQL parameterization to ensure the integrity of the deployment process, presenting a low and well-managed vulnerability surface.
Audit Metadata