homelab-pihole-dns

Fail

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: Downloads the official Pi-hole installation script from install.pi-hole.net and executes it using bash. The skill recommends that users manually inspect the script before proceeding with execution.
  • [REMOTE_CODE_EXECUTION]: Fetches the cloudflared binary directly from Cloudflare's official GitHub repository releases. The instructions include best practices such as pinning a specific release version and verifying checksums to ensure the integrity of the downloaded binary.
  • [COMMAND_EXECUTION]: Uses sudo to perform necessary administrative tasks, including modifying network configuration files (/etc/dhcpcd.conf), moving binaries to system paths (/usr/local/bin), and managing systemd services for the DNS proxy.
  • [INDIRECT_PROMPT_INJECTION]: The skill integrates with external, third-party DNS blocklists (e.g., from the StevenBlack and BlocklistProject repositories). This creates an ingestion surface where external data is brought into the agent's workflow.
  • Ingestion points: External blocklist URLs are fetched during the pihole -g (Update Gravity) process in SKILL.md.
  • Boundary markers: No specific delimiters or warnings are provided to prevent the agent from interpreting embedded instructions within the blocklist data.
  • Capability inventory: The skill environment allows for command execution (bash), system service manipulation (systemctl), and network requests (curl).
  • Sanitization: Blocklist data is parsed by the Pi-hole application logic to extract domain names for the DNS filter.
Recommendations
  • HIGH: Downloads and executes remote code from: https://install.pi-hole.net - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Oct 5, 2026, 01:16 AM