hosting-vaultwarden
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes administrative shell commands such as
podman,systemctl,rsync, andcurlto manage the Vaultwarden service and its data. These operations are standard for systems administration and are confined to the host environment. - [CREDENTIALS_UNSAFE]: The skill manages a Vaultwarden admin token using
agenixfor secure storage. It documents the location of the temporary environment file (/run/vaultwarden-env) and the encryption process, following established best practices for NixOS secret management. Accessing these files is necessary for the stated purpose of troubleshooting the vault's admin panel. - [EXTERNAL_DOWNLOADS]: The skill references the official
vaultwarden/servercontainer image and the widely-usedagenixtool from GitHub. These are well-known and trusted resources within the NixOS and self-hosting communities.
Audit Metadata