linux-site-deployment
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONPERSISTENCE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes numerous high-privilege shell commands to perform system configurations. This includes modifying web server settings in /etc/nginx and /etc/apache2, reloading system services via systemctl, and managing repository updates via local scripts.
- [PRIVILEGE_ESCALATION]: Extensive use of sudo is required for the skill's operations, such as cloning repositories into system directories (/var/www/html), installing software packages, and editing scripts in /usr/local/bin/. This is standard practice for the intended task of server administration.
- [EXTERNAL_DOWNLOADS]: The deployment process involves fetching code from external Git repositories and installing dependencies through npm and Composer. These downloads are triggered by user-supplied URLs and repository content.
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection. Ingestion points: external Git repositories. Boundary markers: absent. Capability inventory: privileged file writes in /etc and /usr/local/bin, package installation with sudo, and service management. Sanitization: absent. A malicious repository could potentially exploit build tools to execute code with elevated permissions during the build phase.
- [PERSISTENCE]: The skill implements a maintenance mechanism by adding entries to a centralized update script located at /usr/local/bin/update-all-repos. This allows for recurring updates and automated builds of the deployed sites.
Audit Metadata