linux-webstack
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill uses standard Linux administration tools (systemctl, nginx, apachectl) to perform its stated tasks without suspicious parameters or hidden commands.
- [SAFE]: Configuration patterns include security best practices, such as using 'server_tokens off' in Nginx to hide version information and 'disable_functions' in PHP to prevent shell execution from scripts.
- [INDIRECT_PROMPT_INJECTION]: The skill reads and analyzes system logs and web server logs which may contain untrusted data from external requests.
- Ingestion points: Access and error logs for Nginx, Apache, and PHP-FPM (e.g., /var/log/nginx/error.log).
- Boundary markers: None present; the agent is instructed to read raw logs for diagnosis.
- Capability inventory: Service management (systemctl reload/restart), file management (ln, rm), and configuration editing (nano).
- Sanitization: No explicit sanitization or instruction to ignore embedded directives within log data is provided.
Audit Metadata