https
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute shell commands for installing Certbot and managing web server configuration files. These commands are standard for the intended administrative purpose.
- [PRIVILEGE_ESCALATION]: Instructions utilize
sudofor system-level package installation and certificate management, which is the required and standard procedure for configuring web server TLS/SSL settings. - [PERSISTENCE]: The skill references the use of
cronfor automatic certificate renewal, which is a standard persistence mechanism for maintaining server security and availability. - [INDIRECT_PROMPT_INJECTION]: The skill involves auditing external websites by reviewing headers and responses, which presents an inherent surface for processing untrusted data.
- Ingestion points: Website auditing instructions in
SKILL.mdand verification steps inreferences/rule.md. - Boundary markers: Absent.
- Capability inventory: The agent is instructed to review server configurations, headers, and forms.
- Sanitization: No specific sanitization or filtering logic is provided for the audited content.
Audit Metadata