pentagi
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads official configuration files (docker-compose.yml, .env.example) from the PentAGI GitHub repository (vxcontrol/pentagi). These are standard deployment assets for the project.
- [COMMAND_EXECUTION]: Instructions include standard Docker and curl commands for deployment. These are necessary for the skill's primary purpose of setting up the platform.
- [CREDENTIALS_SAFE]: The skill explicitly instructs users to replace placeholder credentials in the .env file with strong passwords and long random strings for salts. It also warns never to commit the .env file.
- [PRIVILEGE_ESCALATION]: While the setup involves the Docker socket (a high-privilege interface), the skill includes a specific security guideline recommending the use of a hardened Docker-in-Docker daemon over TLS (DOCKER_INSIDE=true) rather than bind-mounting the host socket, demonstrating security awareness.
Audit Metadata