vps-docker-traefik-deploy
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous shell commands for system provisioning, including managing user accounts (adduser, usermod), modifying system configurations (sed on SSH config, fstab for swap), and configuring the firewall (ufw). These operations require elevated privileges but are strictly aligned with the skill's stated purpose of server deployment.
- [EXTERNAL_DOWNLOADS]: Fetches the official Docker GPG key and repository configuration from download.docker.com. This is an industry-standard source for Docker infrastructure and is considered a safe source.
- [PROMPT_INJECTION]: The skill instructs the agent to ingest untrusted data by reading application-specific deployment documentation and treating it as a 'contract' (SKILL.md). This creates a surface for indirect prompt injection where a malicious file could attempt to influence the agent's behavior.
- Ingestion points: Application-specific deployment documentation files as mentioned in SKILL.md.
- Boundary markers: No specific boundary markers or delimiters are mandated when reading these external files.
- Capability inventory: The skill allows for extensive system-level capabilities including sudo, apt, docker, and firewall management (ufw) as seen in references/server-baseline.md and references/traefik-dns.md.
- Sanitization: No sanitization or validation of the content within those external documents is requested before the agent acts upon them.
Audit Metadata