selfsigned-proxy
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard system tools (
opensslandcaddy) to perform certificate generation and network proxying. These operations are local to the host and aligned with the skill's stated purpose of facilitating local development environments. - [INDIRECT_PROMPT_INJECTION]: The certificate generation script (
scripts/generate_selfsigned_cert.sh) ingests user-supplied hostnames and IP addresses to be used as Common Names and Subject Alternative Names (SANs) in the generated certificate. While this represents a data ingestion surface, the risk is minimal as the inputs are used as strings within a focused cryptographic tool. - Ingestion points: Command-line arguments to
scripts/generate_selfsigned_cert.sh(e.g.,<common-name>,[SAN...]). - Boundary markers: None; arguments are passed directly via shell.
- Capability inventory: Execution of
opensslvia subprocess in the shell script. - Sanitization: The script employs standard Bash double-quoting for variable interpolation to mitigate command injection vulnerabilities.
Audit Metadata