tailnet-policy
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/reload-headscale-policy.shexecutes several shell commands, includingkill,pgrep,ps, andjournalctl, to manage the Headscale service process and verify reload status. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes external
huJSONpolicy files, which presents a surface for indirect instructions to influence agent behavior. * Ingestion points: User-provided policy files are read by the agent and processed byvalidate-policy.pyandmigrate-acls-to-grants.py. * Boundary markers: The skill instructions do not specify the use of delimiters (e.g., XML tags) or provide explicit warnings for the agent to ignore instructions embedded within the policy data. * Capability inventory: The skill is capable of reading and writing local files and executing shell commands via the included automation scripts. * Sanitization: The skill lacks mechanisms to sanitize or filter the content of processed files to prevent the execution of malicious natural language instructions.
Audit Metadata