caddy
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches GPG keys and repository definitions from Cloudsmith, which is a well-known package hosting service used by the Caddy project for official distributions.
- [COMMAND_EXECUTION]: Includes standard Linux commands for package management (
apt), file configuration (tee), and service operation (caddy). These are appropriate for the skill's stated purpose of web server configuration. - [SAFE]: The configuration examples demonstrate secure practices, such as using environment variables (
{env.CF_API_TOKEN}) for sensitive credentials and providing truncated placeholders for password hashes. - [SAFE]: Security-oriented Caddyfile examples are provided, including the configuration of HSTS, CSP, and rate limiting headers, which promote a hardened production environment.
Audit Metadata