expose-localhost
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
ngrokCLI to manage tunnels and usescurlto query the localngrokagent API for public URLs. - [PERSISTENCE]: The skill generates a
.ngrok/expose.shscript and adds a script entry topackage.json, enabling users to easily re-activate the tunnel. - [INDIRECT_PROMPT_INJECTION]: The skill reads project configuration files to identify service ports. 1. Ingestion points: Reads
package.json,.env, anddocker-compose.ymlto extract port values. 2. Boundary markers: None identified. 3. Capability inventory:ngrokCLI command execution, file writing, andpackage.jsonmodification. 4. Sanitization: None; uses basic pattern matching. - [EXTERNAL_DOWNLOADS]: References official
ngrokinfrastructure for authentication and management, which are legitimate vendor resources.
Audit Metadata