skills/notque/vexjoy-agent/deploy/Gen Agent Trust Hub

deploy

Pass

Audited by Gen Agent Trust Hub on Oct 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONPERSISTENCEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill manages system services and infrastructure by providing instructions and patterns for executing administrative commands including systemctl (reloading services), ufw (firewall configuration), certbot (SSL certificate management), and nginx (web server management).
  • [PERSISTENCE]: The skill modifies system automation and environment settings by managing crontab entries via a dedicated manager script and editing shell initialization files such as .zshrc and config.fish.
  • [DYNAMIC_EXECUTION]: The 'Headless Cron Creator' component dynamically generates executable bash wrapper scripts based on user-provided task descriptions to facilitate recurring automation.
  • [INDIRECT_PROMPT_INJECTION]: The skill creates an attack surface for indirect injection by ingesting natural language descriptions from users to generate shell scripts.
  • Ingestion points: User-supplied 'name' and 'prompt' parameters processed in references/headless-cron-creator.md.
  • Boundary markers: Employs bash heredocs to encapsulate user input, though it lacks explicit 'ignore' instructions for the execution context.
  • Capability inventory: Full shell command execution, file system modification, and persistence management via the generated scripts and crontab-manager.py.
  • Sanitization: Uses heredocs to prevent simple command injection through parameter escaping, as documented in the generation phase.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 18, 2026, 01:19 PM