nextdns-cli

Fail

Audited by Gen Agent Trust Hub on Mar 30, 2026

Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: Provides instructions for installing the NextDNS CLI by downloading and executing a shell script directly from the official service domain.
  • Evidence: Commands such as sh -c "$(curl -sL https://nextdns.io/install)" are referenced throughout the installation and upgrade rules.
  • [EXTERNAL_DOWNLOADS]: Fetches binaries, GPG keys, and repository configurations from domains associated with the NextDNS service.
  • Evidence: The skill references nextdns.io and repo.nextdns.io for obtaining software and configuration files for multiple package managers.
  • [COMMAND_EXECUTION]: Directs the agent to execute administrative system commands to manage services and update network resolver settings.
  • Evidence: Extensive use of sudo, systemctl, service, and platform-specific tools like opkg and apk to configure the DNS proxy daemon and modify /etc/resolv.conf.
Recommendations
  • Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Mar 30, 2026, 01:13 AM