verifying-dockportless
Warn
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill instructions include running 'sudo dockportless trust' to install a Root CA certificate into the system trust store, which is a high-privilege operation.
- [COMMAND_EXECUTION]: The skill executes multiple local tools including dockportless, docker compose, git, curl, psql, and redli to manage and verify services.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data with potential for injection. 1. Ingestion points: Service names are ingested from the output of 'docker compose config --services' in 'references/VERIFICATION-GUIDE.md'. 2. Boundary markers: No delimiters or warnings are used for the ingested content. 3. Capability inventory: The skill uses curl and database clients (psql, redli) to interact with services based on the ingested names. 4. Sanitization: Service names are not sanitized before being interpolated into shell commands, although the execution environment is restricted to local services.
Audit Metadata