skills/joelhooks/joelclaw/minio/Gen Agent Trust Hub

minio

Pass

Audited by Gen Agent Trust Hub on Jul 5, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes SSH commands to interact with a remote NAS (label: three-body, IP: 100.67.156.41). These commands include standard system administration tasks such as checking uptime, monitoring Docker containers, and managing compose files.
  • [DATA_EXPOSURE]: The skill explicitly references sensitive environment files containing S3 credentials (e.g., convex-s3.env). However, it includes robust instructions for the agent to redact sensitive values like AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY before reporting outputs, and provides awk scripts designed to safely check for the presence of keys without revealing their values.
  • [REMOTE_CODE_EXECUTION]: The skill provides instructions to execute a shell script located on the NAS (/volume1/joelclaw/s3/install-three-body-convex-minio.sh). This script is described as a custom installer and is executed within the context of NAS administration using sudo over SSH.
  • [INDIRECT_PROMPT_INJECTION]: The skill has the capability to read external data such as Docker logs and bucket listings. While this presents a theoretical attack surface where malicious content in logs could influence the agent, the skill includes explicit instructions for the agent to scan, redact, and bound its output to minimize risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 5, 2026, 05:04 PM
Security Audit — agent-trust-hub — minio