provision-sandbox-access
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the ngrok agent binary from the vendor's official distribution domain at
bin.equinox.io. - [COMMAND_EXECUTION]: The instructions involve executing shell commands to download, extract, and start the ngrok agent binary (
ngrok start). - [PRIVILEGE_ESCALATION]: The skill describes installing the ngrok agent as a native OS service, which typically requires root or administrator privileges on the host system.
- [PERSISTENCE]: The skill facilitates maintaining persistent access to the sandbox environments by configuring the ngrok agent as a native system service (e.g., using
systemdon Linux) to ensure it restarts automatically. - [INDIRECT_PROMPT_INJECTION]: The skill ingests a
uuidfrom the control plane's object model to derive resource names and internal hostnames. - Ingestion points: A UUID string is provided by the control plane environment to identify sandboxes.
- Boundary markers: None explicitly mentioned for the UUID string, though it is used within structured identifiers.
- Capability inventory: The skill uses the ngrok API to provision service users, credentials, and endpoints, and executes shell commands for agent management.
- Sanitization: The skill assumes the identifier is derived from a trusted internal object model, though no specific sanitization of the UUID string is described before interpolation into URLs and names.
Audit Metadata