deploy
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPERSISTENCEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill manages system services and infrastructure by providing instructions and patterns for executing administrative commands including
systemctl(reloading services),ufw(firewall configuration),certbot(SSL certificate management), andnginx(web server management). - [PERSISTENCE]: The skill modifies system automation and environment settings by managing crontab entries via a dedicated manager script and editing shell initialization files such as
.zshrcandconfig.fish. - [DYNAMIC_EXECUTION]: The 'Headless Cron Creator' component dynamically generates executable bash wrapper scripts based on user-provided task descriptions to facilitate recurring automation.
- [INDIRECT_PROMPT_INJECTION]: The skill creates an attack surface for indirect injection by ingesting natural language descriptions from users to generate shell scripts.
- Ingestion points: User-supplied 'name' and 'prompt' parameters processed in
references/headless-cron-creator.md. - Boundary markers: Employs bash heredocs to encapsulate user input, though it lacks explicit 'ignore' instructions for the execution context.
- Capability inventory: Full shell command execution, file system modification, and persistence management via the generated scripts and
crontab-manager.py. - Sanitization: Uses heredocs to prevent simple command injection through parameter escaping, as documented in the generation phase.
Audit Metadata