vps-nginx-cloudpanel
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/collect-host-state.shexecutes several system-level discovery commands to inventory the environment. These includessfor network sockets,systemctlfor services,ufw/nftfor firewall status,nginx -Tfor configuration, anddocker psfor container status. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection because it processes output from the host environment which may contain attacker-controlled strings.
- Ingestion points: Output from
systemctl,docker ps, andssare captured byscripts/collect-host-state.shand processed by the agent. - Boundary markers: Absent. The skill does not implement delimiters or specific instructions to help the agent distinguish between diagnostic data and embedded instructions.
- Capability inventory: The skill is intended to help the agent inventory the host and modify configuration files.
- Sanitization: Absent. The raw output of system discovery commands is passed directly to the agent context without filtering.
Audit Metadata