certificate-management
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Analysis of the skill's instructions, tool calls, and example interactions reveals no malicious patterns or security vulnerabilities.
- [COMMAND_EXECUTION]: The skill documentation includes legitimate uses of system commands such as openssl for generating certificates and docker or systemctl for service management.
- [PRIVILEGE_ESCALATION]: Usage of sudo is correctly limited to tasks requiring administrative privileges, such as managing systemd timers or accessing protected certificate directories.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for ingesting user-provided domain names for certificate operations. 1. Ingestion points: domain name parameters in SKILL.md. 2. Boundary markers: Not present in the instruction set. 3. Capability inventory: Execution of certificate generation and service management commands. 4. Sanitization: Handled at the tool implementation level.
Audit Metadata