caddy

Pass

Audited by Gen Agent Trust Hub on Mar 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a standard administrative utility for the Caddy web server. All identified patterns are contextually appropriate for server management.- [COMMAND_EXECUTION]: Utilizes sudo for service control via systemctl and setcap for granting network capabilities to the caddy binary. These are standard operations for managing system services.- [EXTERNAL_DOWNLOADS]: Refers to official installation guides from caddyserver.com and identifies community modules from GitHub. These sources are considered well-known and safe.- [CREDENTIALS_UNSAFE]: Provides example bcrypt-hashed passwords for Basic Authentication within the documentation. These are demonstrative placeholders and do not contain sensitive user information.- [PROMPT_INJECTION]: The skill identifies an indirect prompt injection surface by processing configuration files (Caddyfile, caddy.json).
  • Ingestion points: Configuration files specified in globs.
  • Boundary markers: Absent.
  • Capability inventory: System service management and CLI execution.
  • Sanitization: Includes syntax validation and formatting tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 18, 2026, 01:36 PM