gddy
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches installation scripts (
install.shandinstall.ps1) and OpenAPI specifications from official GoDaddy-managed domains and GitHub repositories. - [REMOTE_CODE_EXECUTION]: Executes the downloaded vendor scripts via shell pipes (
| bash) or PowerShell (| iex) to install thegddyCLI tool. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the GoDaddy Developer Platform and external OpenAPI JSON files. While this represents an attack surface, the risk is mitigated by the skill's specific instructions to require explicit user consent for financial transactions and destructive operations.
Audit Metadata