unbound
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill utilizes
sudofor legitimate service management tasks such as reloading the configuration, checking syntax, and managing theunboundservice viasystemctl. These are standard administrative requirements for managing network services. - [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: A command is provided to fetch root hints from the official InterNIC server (https://www.internic.net/domain/named.cache). This is documented as a trusted source for DNS root information.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The configuration references local file paths for TLS keys and certificates in
/etc/unbound/for theremote-controlfeature. There are no patterns indicating these secrets are being leaked externally. - [INDIRECT_PROMPT_INJECTION]: The skill has a potential attack surface. 1. Ingestion points:
unbound.confand service logs fromjournalctl. 2. Boundary markers: Absent. 3. Capability inventory:sudofor service management andcurlfor data retrieval. 4. Sanitization: Absent.
Audit Metadata