lazycat-advanced-routing
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECREDENTIALS_UNSAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The documentation contains a hardcoded Base64 string (dXNlcjpwYXNzd29yZA==) used as an example for bypassing Basic Authentication. The string decodes to the dummy value 'user:password' and serves solely as a documentation placeholder.
- [COMMAND_EXECUTION]: The skill provides instructions for using 'setup_script' to write configuration files directly to sensitive system directories such as '/etc/nginx/conf.d/'. This is a high-privilege administrative feature of the platform being documented.
- [DYNAMIC_EXECUTION]: The skill documents the 'exec://' protocol, which allows for the runtime execution of arbitrary scripts or binaries as part of the application routing mechanism. This mechanism allows for dynamic behavior based on manifest configuration.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs on configuring network ingestion surfaces, which presents an attack surface for indirect injection.
- Ingestion points: Manifest fields 'application.routes', 'upstreams', and 'ingress' in SKILL.md and referenced documentation.
- Boundary markers: Lacking in standard examples, though the documentation describes manual header filtering using 'remove_this_request_headers'.
- Capability inventory: Includes Nginx configuration writing, binary execution, and network port forwarding.
- Sanitization: Mentions 'disable_url_raw_path' for normalization but does not provide examples of content-level sanitization.
Audit Metadata