maintenance

Warn

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill performs administrative tasks including service status checks using systemctl, database backups via pg_dump, and software updates using docker-compose. These operations require high privileges on the host system to function as intended.\n- [DATA_EXFILTRATION]: The skill accesses and transfers sensitive information to perform its maintenance and recovery duties. It backs up environment files such as .env, configuration files like Caddyfile, and the Postgres database. These backups are then copied to external destinations such as S3, syncthing, or a secondary VPS. Furthermore, the skill sends system status context and decision prompts to OpenRouter at https://openrouter.ai/api/alpha/decisions to automate operational choices.\n- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to instructions embedded in external data it processes, which could influence its automated maintenance decisions. \n
  • Ingestion points: Reads release notes from upstream GitHub repositories (e.g., Cal.diy, Typebot, n8n) during the weekly update cycle.\n
  • Boundary markers: Absent; there are no instructions to delimit or ignore instructions within the fetched release notes.\n
  • Capability inventory: The skill possesses capabilities to execute shell commands, write files, and perform network requests.\n
  • Sanitization: The skill does not implement sanitization or validation of the external release note content before processing it via the LLM.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 16, 2026, 08:53 AM