daemon-service-manage
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPERSISTENCE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a dedicated script
serviceman.mjsto execute PM2 commands vianode:child_process. This allows the agent to start, stop, restart, and inspect services. The script uses argument arrays inspawnSync, which effectively mitigates shell injection risks. - [EXTERNAL_DOWNLOADS]: The instructions and management script rely on
npxanduvxto fetch and execute thepm2package and service binaries at runtime. This ensures that lifecycle management does not depend on a locally installed version but involves dynamic downloads from the NPM and PyPI registries. - [PERSISTENCE]: The skill's primary purpose is establishing persistence for processes across reboots using PM2's startup integration (systemd on Linux, launchd on macOS). It provides clear instructions to use
npx pm2 saveandnpx pm2 startupto maintain process lists. - [SAFE_PRACTICES]: The skill contains explicit security warnings for the AI agent, such as avoiding the silent execution of
sudocommands and ensuring that credentials, private keys, and secrets are excluded from command output.
Audit Metadata