open-terminal-guide
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference guide for a remote terminal tool. It provides detailed documentation on how to deploy and interact with the Open Terminal API.
- [SAFE]: Extensive security guardrails are included throughout the documentation. It explicitly warns users about the risks of remote code execution, file operations, and proxying, recommending isolation (Docker), VPNs, and manual content verification.
- [EXTERNAL_DOWNLOADS]: The documentation refers to official resources such as the Open WebUI GitHub repository and the Open Terminal container image on GHCR (GitHub Container Registry). These are well-known and trusted sources within the AI development ecosystem.
- [COMMAND_EXECUTION]: While the guide provides examples of how to run the terminal service (e.g.,
docker run,uvx,pip install), these are standard deployment commands for the tool described. It uses safe placeholders for sensitive values like API keys (e.g.,<random-secret-from-secret-store>). - [INDIRECT_PROMPT_INJECTION]: The skill acknowledges the risk of indirect prompt injection due to the tool's nature (processing external commands and files). It provides specific guidance on treating inputs as untrusted and implementing perimeter security, which aligns with security best practices for high-capability tools.
Audit Metadata