nginx-configuration
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The provided nginx-deploy.sh script utilizes the Bash tool to execute service management commands including systemctl reload, systemctl start, and nginx -t. These are standard administrative actions for managing Nginx deployments and verifying configuration integrity.
- [INDIRECT_PROMPT_INJECTION]: The skill manages system configurations and executes shell commands, creating a surface for indirect prompt injection. 1. Ingestion points: Nginx server blocks and configuration examples in SKILL.md. 2. Boundary markers: None identified in the text. 3. Capability inventory: The skill utilizes Write, Edit, and Bash tools to modify configuration files and interact with the systemd init system (systemctl, journalctl). 4. Sanitization: Configuration templates use standard Nginx syntax without explicit input validation layers.
- [SAFE]: The network operations are limited to local health checks using curl on localhost. References to sensitive directory paths like /etc/ssl/private/ are used as standard placeholders for legitimate SSL/TLS configuration.
Audit Metadata