deploy-mmo-infrastructure
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill's infrastructure definitions request elevated Linux capabilities for containerized network operations.
- Evidence:
cap_add: [NET_ADMIN]in theproxy_tunnelservice definition withinSKILL.mdused for Wireguard client operations. - [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download and use external Docker images and interact with remote API services.
- Evidence:
image: camoufox/stealth:latestandimage: wireguard/client:latestinSKILL.md. - Evidence: External API call to
api.ipdata.coin theprobe_proxy_healthPython snippet. - [INDIRECT_PROMPT_INJECTION]: The skill provides a health probe mechanism that ingests JSON data from an external IP intelligence API. This data represents an attack surface where malicious or unexpected content could influence downstream agent logic if not properly sanitized.
- Ingestion points:
probe_proxy_healthfunction inSKILL.md(ingests response fromapi.ipdata.co). - Boundary markers: Absent in the provided Python snippet code.
- Capability inventory:
execute_command,write_file,edit_file,create_fileas defined in the YAML frontmatter. - Sanitization: Absent in the snippet; the skill relies on the
ASI05 RCE Guardtextual instruction for manual verification.
Audit Metadata