nginx-expert
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill is configured to use the Bash tool restricted to
nginxandsystemctlcommands. These are necessary for the skill's primary purpose of testing configurations (nginx -t) and managing the web server service (systemctl reload nginx). These operations are scoped appropriately for a DevOps-focused skill. - [PERSISTENCE]: The reference material provides standard documentation for setting up a cron job to handle automatic SSL certificate renewal via
certbot. This is a routine administrative task and does not represent a malicious persistence mechanism. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface by processing user-provided Nginx configuration requirements. It has the capability to write files and execute server commands. However, the skill provides clear boundary instructions, such as mandating configuration testing (
nginx -t) before reloading, which serves as a safety check against malformed or malicious configurations.
Audit Metadata