tailscale-client
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONPERSISTENCEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches cryptographic keys and repository metadata from the official Tailscale package server (
pkgs.tailscale.com) during the installation process. - [COMMAND_EXECUTION]: Employs
sudoto perform system-level tasks such as package installation, managing thetailscaledservice, and executing thetailscale upconfiguration command. - [PRIVILEGE_ESCALATION]: Configures system-level repositories and service unit files, requiring administrative privileges to integrate the VPN client with the host operating system.
- [PERSISTENCE]: Configures the
tailscaleddaemon to be managed by the system's service manager (e.g., systemd), ensuring network connectivity persists across reboots. - [DYNAMIC_EXECUTION]: Uses
python3 -cto execute inline Python code for parsing and formatting JSON diagnostic data within thets-diagnostics.shshell script. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data generated by the
tailscalebinary to produce diagnostic reports. * Ingestion points: Tool output fromtailscale statusandtailscale pingcommands executed ints-diagnostics.sh. * Boundary markers: The skill does not employ specific delimiters to isolate external tool output from the agent's control logic. * Capability inventory: The skill possesses capabilities for elevated command execution (sudo) and system service modification. * Sanitization: Employs standard Python JSON libraries and basic shell processing to handle and display command outputs.
Audit Metadata