web-publish

Warn

Audited by Gen Agent Trust Hub on Apr 1, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The PowerShell and Python scripts download a portable Apache ZIP archive from apachelounge.com if a local installation is not found in the tools directory.
  • [REMOTE_CODE_EXECUTION]: The skill automatically extracts the contents of the downloaded ZIP and executes the httpd.exe binary on the host system to start the web server.
  • [COMMAND_EXECUTION]: The skill uses subprocess.Popen in Python and Start-Process in PowerShell to manage the Apache service, apply configuration changes, and perform diagnostics.
  • [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface by ingesting data from the .v8-project.json file and using the values as command-line arguments for the publication scripts. Ingestion points: .v8-project.json (via the Read tool). Capability inventory: Shell execution of scripts with user-controlled arguments. Sanitization: The instructions do not specify sanitization or the use of boundary markers for the ingested project data.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 1, 2026, 03:43 PM
Security Audit — agent-trust-hub — web-publish