skills/mukul975/anthropic-cybersecurity-skills/deploying-tailscale-for-zero-trust-vpn/Gen Agent Trust Hub
deploying-tailscale-for-zero-trust-vpn
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill documents the official installation method for Tailscale via a remote script (https://tailscale.com/install.sh) piped to the shell. This is a standard and authoritative setup procedure for the well-known service described.
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading the Headscale binary from its official repository (github.com/juanfont/headscale) for self-hosted VPN control plane deployment. This is a legitimate download from the primary source of the software.
- [COMMAND_EXECUTION]: The Python script
scripts/process.pyexecutes thetailscaleCLI to retrieve network status using a static list of arguments, minimizing the risk of command injection. - [COMMAND_EXECUTION]: Multiple sections in
SKILL.mdutilizesudofor system-level operations such as moving binaries, managing network services, and updating system configuration, which are required permissions for managing VPN infrastructure. - [DATA_EXFILTRATION]: The auditing script
scripts/agent.pyinteracts with the official Tailscale API (api.tailscale.com). It handles API keys through command-line arguments and does not exhibit any hardcoded credentials or unauthorized data transmission to third-party domains.
Audit Metadata