https

Pass

Audited by Gen Agent Trust Hub on Oct 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute shell commands for installing Certbot and managing web server configuration files. These commands are standard for the intended administrative purpose.
  • [PRIVILEGE_ESCALATION]: Instructions utilize sudo for system-level package installation and certificate management, which is the required and standard procedure for configuring web server TLS/SSL settings.
  • [PERSISTENCE]: The skill references the use of cron for automatic certificate renewal, which is a standard persistence mechanism for maintaining server security and availability.
  • [INDIRECT_PROMPT_INJECTION]: The skill involves auditing external websites by reviewing headers and responses, which presents an inherent surface for processing untrusted data.
  • Ingestion points: Website auditing instructions in SKILL.md and verification steps in references/rule.md.
  • Boundary markers: Absent.
  • Capability inventory: The agent is instructed to review server configurations, headers, and forms.
  • Sanitization: No specific sanitization or filtering logic is provided for the audited content.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 10, 2026, 07:02 AM