load-balancer
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEPERSISTENCECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate, well-structured configuration templates for Nginx and HAProxy. It includes appropriate security configurations, such as HTTP Strict Transport Security (HSTS) headers, X-Frame-Options, and robust rate-limiting zones to protect application backends.
- [COMMAND_EXECUTION]: Provides instructions for installing management utilities (
apt install certbot) and executing service reload commands (nginx -s reload) necessary for implementing the described load balancing and SSL features. - [PERSISTENCE]: The skill includes instructions for creating a cron job to ensure the automatic renewal of SSL certificates via
certbot renew, which is a standard maintenance practice for secure web infrastructure. - [INDIRECT_PROMPT_INJECTION]: The skill functions as a template generator for configurations based on user requirements.
- Ingestion points: User-provided backend server addresses, port numbers, and domain names used to populate Nginx and HAProxy templates.
- Boundary markers: None explicitly defined in the provided examples for segregating user input within the generated configuration files.
- Capability inventory: The skill facilitates file system modifications for server configurations and administrative command execution for package management.
- Sanitization: The generated Nginx configurations proactively include security directives to deny access to sensitive paths, such as
.gitrepositories and.envfiles, which effectively mitigates common web-based data exposure risks.
Audit Metadata