integrations
Fail
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides the official NextDNS CLI installer command (
curl -sL https://nextdns.io/install | sh) across multiple platform guides including OpenWrt, pfSense, and Raspberry Pi. This is the standard, documented installation method for the well-known NextDNS service. - [COMMAND_EXECUTION]: Extensive shell command sequences are provided for network device administration, including SSH access configuration, service management (systemd, rc.d), and package installation using platform-specific tools like
opkgandapt. - [EXTERNAL_DOWNLOADS]: The instructions involve downloading software and security certificates from established domains, including the official NextDNS repositories (
nextdns.io), DigiCert's certificate authority (digicert.com), and official Docker Hub images (nextdns/nextdns). - [INDIRECT_PROMPT_INJECTION]: A migration guide (
rules/pihole-migration.md) includes Node.js script templates that ingest local data (Pi-hole gravity database exports) and transmit it to the NextDNS API. - Ingestion points: Processes local files
pihole-blocklist.txt,pihole-allowlist.txt, andpihole-local-dns.txt(file: rules/pihole-migration.md). - Boundary markers: Absent in the example scripts.
- Capability inventory: Performs network requests via
fetch()toapi.nextdns.io. - Sanitization: Implements basic domain validation using a regular expression (
/^[a-z0-9.-]+\.[a-z]{2,}$/).
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
Audit Metadata