load-balancer

Pass

Audited by Gen Agent Trust Hub on Sep 27, 2026

Risk Level: SAFEPERSISTENCECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides legitimate, well-structured configuration templates for Nginx and HAProxy. It includes appropriate security configurations, such as HTTP Strict Transport Security (HSTS) headers, X-Frame-Options, and robust rate-limiting zones to protect application backends.
  • [COMMAND_EXECUTION]: Provides instructions for installing management utilities (apt install certbot) and executing service reload commands (nginx -s reload) necessary for implementing the described load balancing and SSL features.
  • [PERSISTENCE]: The skill includes instructions for creating a cron job to ensure the automatic renewal of SSL certificates via certbot renew, which is a standard maintenance practice for secure web infrastructure.
  • [INDIRECT_PROMPT_INJECTION]: The skill functions as a template generator for configurations based on user requirements.
  • Ingestion points: User-provided backend server addresses, port numbers, and domain names used to populate Nginx and HAProxy templates.
  • Boundary markers: None explicitly defined in the provided examples for segregating user input within the generated configuration files.
  • Capability inventory: The skill facilitates file system modifications for server configurations and administrative command execution for package management.
  • Sanitization: The generated Nginx configurations proactively include security directives to deny access to sensitive paths, such as .git repositories and .env files, which effectively mitigates common web-based data exposure risks.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 27, 2026, 06:01 PM