nextdns-cli
Fail
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Provides instructions for installing the NextDNS CLI by downloading and executing a shell script directly from the official service domain.
- Evidence: Commands such as
sh -c "$(curl -sL https://nextdns.io/install)"are referenced throughout the installation and upgrade rules. - [EXTERNAL_DOWNLOADS]: Fetches binaries, GPG keys, and repository configurations from domains associated with the NextDNS service.
- Evidence: The skill references
nextdns.ioandrepo.nextdns.iofor obtaining software and configuration files for multiple package managers. - [COMMAND_EXECUTION]: Directs the agent to execute administrative system commands to manage services and update network resolver settings.
- Evidence: Extensive use of
sudo,systemctl,service, and platform-specific tools likeopkgandapkto configure the DNS proxy daemon and modify/etc/resolv.conf.
Recommendations
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata