creating-taubyte-resources
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to manage Taubyte cloud resources using the
tauCLI. Operations include creating, importing, and selecting domains, websites, applications, and databases via commands liketau new,tau import, andtau select. These commands are standard for the platform's workflow. - [DYNAMIC_EXECUTION]: Includes a Python one-liner
python3 -c "s='<cid>'; print(s[-8:])"to extract a suffix from a project CID. This is used for generating hostnames according to specific host policies and does not involve arbitrary or untrusted code execution. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided inputs such as resource names and descriptions to populate CLI command arguments. While this represents a theoretical injection surface if the agent fails to sanitize user inputs, the instructions are scoped to the intended functionality of the Taubyte vendor platform.
Audit Metadata