reverse-proxy
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes standard administrative commands for managing web servers, such as
sudo apt install,sudo certbot,sudo nginx -t, andsudo systemctl. These are documented as manual steps for a system administrator to configure the reverse proxy and obtain SSL certificates. - [EXTERNAL_DOWNLOADS]: Fetches standard packages (Certbot) from official Ubuntu/Debian repositories using
apt. This is a standard and safe practice for server configuration. - [PRIVILEGE_ESCALATION]: Uses
sudofor installation and service management. This is required and expected for the documented task of configuring system-level services like nginx and Traefik. - [DATA_EXPOSURE]: The skill correctly handles sensitive data by providing placeholders (e.g.,
app.example.com,admin@example.com) and advising users to store TLS keys in standard protected paths like/etc/letsencrypt/live/. It specifically warns against trusting client-supplied forwarding headers as identity.
Audit Metadata