nextdns-ui

Warn

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for executing shell and PowerShell commands to configure network settings and certificate stores. Evidence includes nextdns config set and Import-Certificate commands documented in rules/device-management.md and rules/root-ca-installation.md.
  • [PRIVILEGE_ESCALATION]: The skill includes instructions that require administrative or superuser rights to modify the host system's trusted certificate store and network configuration. Evidence includes the usage of sudo and PowerShell targeting the LocalMachine\Root store in rules/root-ca-installation.md and rules/multiple-profiles-strategy.md.
  • [EXTERNAL_DOWNLOADS]: The skill fetches a certificate file from the official NextDNS domain for system-wide installation. Evidence is found in rules/root-ca-installation.md via the command curl -O https://nextdns.io/ca.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from network logs and external blocklists while retaining access to system configuration commands.
  • Ingestion points: Network activity logs in rules/analytics-logs.md and external blocklists in rules/privacy-settings.md.
  • Boundary markers: None identified.
  • Capability inventory: Shell command execution for NextDNS configuration and system certificate management.
  • Sanitization: None identified.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 17, 2026, 05:23 PM