skills/openduo/duoduo/duoduo-tether/Gen Agent Trust Hub

duoduo-tether

Warn

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: MEDIUMPERSISTENCEPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [PERSISTENCE]: The skill provides detailed instructions and scripts for creating persistent system services using launchd on macOS and systemd on Linux. These services ensure that networking components, such as the Cloudflare Tunnel client and the custom Node.js relay connector, remain active across system reboots.
  • [PRIVILEGE_ESCALATION]: The setup process involves installing system-level daemons and modifying network access control policies, such as Tailscale ACLs. These operations typically require administrative or superuser privileges to implement host-wide changes.
  • [INDIRECT_PROMPT_INJECTION]: By tethering external AI assistants to the local environment, the skill creates a large ingestion surface for potentially untrusted data. The assistants process event logs and mailbox content via tools like ReadMail and ReadEvents. The skill attempts to mitigate this risk through structured 'Boundary' instructions in its handoff prompts that require owner confirmation for significant actions.
  • [COMMAND_EXECUTION]: The skill relies on extensive execution of shell commands for networking diagnostics, service management, and configuration tasks across several files, including SKILL.md and the route playbooks.
  • [DYNAMIC_EXECUTION]: The skill manages the lifecycle of a Node.js-based connector script (connector.mjs) and dynamically generates sensitive configuration files like .env, plist definitions, and systemd service units based on local environment variables.
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download and use tools from well-known services, such as cloudflared, tailscale, and wrangler, to establish reachability for the tether channel.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 8, 2026, 05:41 AM