tailscale-client

Pass

Audited by Gen Agent Trust Hub on Sep 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONPERSISTENCEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches cryptographic keys and repository metadata from the official Tailscale package server (pkgs.tailscale.com) during the installation process.
  • [COMMAND_EXECUTION]: Employs sudo to perform system-level tasks such as package installation, managing the tailscaled service, and executing the tailscale up configuration command.
  • [PRIVILEGE_ESCALATION]: Configures system-level repositories and service unit files, requiring administrative privileges to integrate the VPN client with the host operating system.
  • [PERSISTENCE]: Configures the tailscaled daemon to be managed by the system's service manager (e.g., systemd), ensuring network connectivity persists across reboots.
  • [DYNAMIC_EXECUTION]: Uses python3 -c to execute inline Python code for parsing and formatting JSON diagnostic data within the ts-diagnostics.sh shell script.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data generated by the tailscale binary to produce diagnostic reports. * Ingestion points: Tool output from tailscale status and tailscale ping commands executed in ts-diagnostics.sh. * Boundary markers: The skill does not employ specific delimiters to isolate external tool output from the agent's control logic. * Capability inventory: The skill possesses capabilities for elevated command execution (sudo) and system service modification. * Sanitization: Employs standard Python JSON libraries and basic shell processing to handle and display command outputs.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 3, 2026, 02:39 AM
Security Audit — agent-trust-hub — tailscale-client