web-publish
Warn
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The PowerShell and Python scripts download a portable Apache ZIP archive from
apachelounge.comif a local installation is not found in the tools directory. - [REMOTE_CODE_EXECUTION]: The skill automatically extracts the contents of the downloaded ZIP and executes the
httpd.exebinary on the host system to start the web server. - [COMMAND_EXECUTION]: The skill uses
subprocess.Popenin Python andStart-Processin PowerShell to manage the Apache service, apply configuration changes, and perform diagnostics. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface by ingesting data from the
.v8-project.jsonfile and using the values as command-line arguments for the publication scripts. Ingestion points:.v8-project.json(via theReadtool). Capability inventory: Shell execution of scripts with user-controlled arguments. Sanitization: The instructions do not specify sanitization or the use of boundary markers for the ingested project data.
Audit Metadata