nextdns-ui
Warn
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for executing shell and PowerShell commands to configure network settings and certificate stores. Evidence includes
nextdns config setandImport-Certificatecommands documented inrules/device-management.mdandrules/root-ca-installation.md. - [PRIVILEGE_ESCALATION]: The skill includes instructions that require administrative or superuser rights to modify the host system's trusted certificate store and network configuration. Evidence includes the usage of
sudoand PowerShell targeting theLocalMachine\Rootstore inrules/root-ca-installation.mdandrules/multiple-profiles-strategy.md. - [EXTERNAL_DOWNLOADS]: The skill fetches a certificate file from the official NextDNS domain for system-wide installation. Evidence is found in
rules/root-ca-installation.mdvia the commandcurl -O https://nextdns.io/ca. - [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from network logs and external blocklists while retaining access to system configuration commands.
- Ingestion points: Network activity logs in
rules/analytics-logs.mdand external blocklists inrules/privacy-settings.md. - Boundary markers: None identified.
- Capability inventory: Shell command execution for NextDNS configuration and system certificate management.
- Sanitization: None identified.
Audit Metadata