be-nas
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions define a specialized persona for NAS administration that prioritizes data safety and system stability. It mandates a 'check-before-execute' pattern and requires explicit user consent for high-risk operations such as disk formatting or modifying partition tables.
- [COMMAND_EXECUTION]: The skill involves executing system-level commands (e.g.,
apt,docker,lsblk,smartctl,mdadm). These are legitimate and necessary for the stated purpose of NAS management. The instructions include specific verification steps (e.g.,docker compose config --quiet,stat -c %a) to ensure commands are executed correctly and securely. - [CREDENTIALS_UNSAFE]: While the skill manages sensitive configuration files like
.envand SSH keys, it explicitly instructs the agent to enforce strict file permissions (600) and warns against exposing management panels to the public internet without authentication. - [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of standard, well-known software packages from official repositories (Debian/Ubuntu mirrors) and the deployment of official or trusted Docker images for media services (Jellyfin, Plex, etc.).
Audit Metadata