deploying-tailscale-for-zero-trust-vpn

Pass

Audited by Gen Agent Trust Hub on Mar 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references and downloads installation scripts and binaries from Tailscale's official domain (tailscale.com) and Headscale's public GitHub repository.
  • [COMMAND_EXECUTION]: Python scripts in the skill use subprocess calls to execute the Tailscale CLI (tailscale status --json) to monitor network health and peer connectivity.
  • [COMMAND_EXECUTION]: The documentation includes instructions for system-level configuration using sudo and sysctl to enable network features like IP forwarding and to manage binary permissions.
  • [REMOTE_CODE_EXECUTION]: The skill provides the official Tailscale installation command which pipes a remote script to the shell (curl ... | sh); this is a standard and documented installation method for the service.
  • [CREDENTIALS_UNSAFE]: The auditing script is designed to accept a Tailscale API key as a command-line argument; no secrets or tokens are hardcoded within the files.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 16, 2026, 03:02 AM