provision-sandbox-access

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the ngrok agent binary from the vendor's official distribution domain at bin.equinox.io.
  • [COMMAND_EXECUTION]: The instructions involve executing shell commands to download, extract, and start the ngrok agent binary (ngrok start).
  • [PRIVILEGE_ESCALATION]: The skill describes installing the ngrok agent as a native OS service, which typically requires root or administrator privileges on the host system.
  • [PERSISTENCE]: The skill facilitates maintaining persistent access to the sandbox environments by configuring the ngrok agent as a native system service (e.g., using systemd on Linux) to ensure it restarts automatically.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests a uuid from the control plane's object model to derive resource names and internal hostnames.
  • Ingestion points: A UUID string is provided by the control plane environment to identify sandboxes.
  • Boundary markers: None explicitly mentioned for the UUID string, though it is used within structured identifiers.
  • Capability inventory: The skill uses the ngrok API to provision service users, credentials, and endpoints, and executes shell commands for agent management.
  • Sanitization: The skill assumes the identifier is derived from a trusted internal object model, though no specific sanitization of the UUID string is described before interpolation into URLs and names.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 10:01 PM