synology-file-station
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The script
scripts/synology_file_station.pytransmits authentication credentials includingSYNOLOGY_PASSWORDto a user-defined base URL. The script provides an option to disable SSL verification via theSYNOLOGY_VERIFY_SSLenvironment variable, which could facilitate credential theft through man-in-the-middle attacks on untrusted networks. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: Untrusted file metadata and search results are ingested from the remote NAS in
scripts/synology_file_station.pyvia thelistandsearch-listcommands. - Boundary markers: The skill returns data in JSON format but lacks explicit boundary markers or instructions to the agent to disregard potentially malicious commands embedded in filenames or metadata.
- Capability inventory: The script exposes high-privilege file operations such as
delete,move, anduploadinscripts/synology_file_station.py. - Sanitization: There is no implemented sanitization or filtering of the remote file metadata before it is processed by the agent.
Audit Metadata