duoduo-tether
Warn
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: MEDIUMPERSISTENCEPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PERSISTENCE]: The skill provides detailed instructions and scripts for creating persistent system services using
launchdon macOS andsystemdon Linux. These services ensure that networking components, such as the Cloudflare Tunnel client and the custom Node.js relay connector, remain active across system reboots. - [PRIVILEGE_ESCALATION]: The setup process involves installing system-level daemons and modifying network access control policies, such as Tailscale ACLs. These operations typically require administrative or superuser privileges to implement host-wide changes.
- [INDIRECT_PROMPT_INJECTION]: By tethering external AI assistants to the local environment, the skill creates a large ingestion surface for potentially untrusted data. The assistants process event logs and mailbox content via tools like
ReadMailandReadEvents. The skill attempts to mitigate this risk through structured 'Boundary' instructions in its handoff prompts that require owner confirmation for significant actions. - [COMMAND_EXECUTION]: The skill relies on extensive execution of shell commands for networking diagnostics, service management, and configuration tasks across several files, including
SKILL.mdand the route playbooks. - [DYNAMIC_EXECUTION]: The skill manages the lifecycle of a Node.js-based connector script (
connector.mjs) and dynamically generates sensitive configuration files like.env, plist definitions, and systemd service units based on local environment variables. - [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download and use tools from well-known services, such as
cloudflared,tailscale, andwrangler, to establish reachability for the tether channel.
Audit Metadata