join-tailnet

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local and remote system commands using ssh, curl, and jq to manage Tailscale and infrastructure integrations.
  • [DYNAMIC_EXECUTION]: The skill generates a bash script using a heredoc and executes it on a remote host through SSH.
  • [PRIVILEGE_ESCALATION]: The skill uses sudo on the remote VM to manage the tailscaled daemon and configure network settings.
  • [INDIRECT_PROMPT_INJECTION]: The skill takes a VM name as a command-line argument, which is interpolated into shell commands, representing an unsanitized input surface.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 05:31 PM