web-unpublish
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill manages the lifecycle of the Apache service, including stopping and restarting the httpd.exe process to ensure configuration changes are applied.
- [COMMAND_EXECUTION]: Executes PowerShell and Python scripts to automate the modification of system configuration files and the removal of publication directories.
- [INDIRECT_PROMPT_INJECTION]: The skill processes the httpd.conf file to identify markers for deletion.
- Ingestion points: Reads and parses httpd.conf in both scripts/web-unpublish.ps1 and scripts/web-unpublish.py.
- Boundary markers: None; the script relies on specific comment-based markers (e.g., # --- 1C Publication: name ---).
- Capability inventory: Performs recursive directory deletion and process termination.
- Sanitization: Extracted publication names are used to construct file paths; while these are scoped to the Apache directory, there is no explicit validation against path traversal if the configuration file itself is compromised.
Audit Metadata