tailscale
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches repository configuration files and GPG security keys from Tailscale's official distribution servers (pkgs.tailscale.com) during the installation process.
- [COMMAND_EXECUTION]: Utilizes sudo for administrative tasks including package management via apt-get and dnf, system-level networking configuration using sysctl, and service lifecycle management via systemctl.
- [INDIRECT_PROMPT_INJECTION]: The provided fleet provisioning script demonstrates a pattern for automating device registration that involves processing external inputs.
- Ingestion points: The provision-fleet.sh script accepts a list of server IP addresses and an authentication key retrieved from the Tailscale API.
- Boundary markers: No explicit delimiters or boundary markers are implemented for the interpolated variables in the script examples.
- Capability inventory: The skill scripts utilize ssh for remote command execution and curl for network interaction with the Tailscale API.
- Sanitization: The automation examples assume the validity of the provided server list and API responses without internal validation or escaping.
Audit Metadata