Infrastructure Maintainer

Pass

Audited by Gen Agent Trust Hub on Oct 25, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external system data, creating an attack surface for indirect prompt injection.
  • Ingestion points: Infrastructure assessment, performance analysis, and security audits involve reading external data such as system logs, cloud configurations, and vulnerability scan results as described in the Workflow Process.
  • Boundary markers: The instructions lack explicit delimiters or instructions to ignore embedded commands within the processed data.
  • Capability inventory: The skill provides templates for executing shell scripts, Terraform configurations, and AWS CLI operations across the infrastructure.
  • Sanitization: There are no documented procedures for sanitizing or validating external input before it is processed or incorporated into reports.
  • [COMMAND_EXECUTION]: The skill utilizes shell scripts and CLI tools for critical system maintenance and infrastructure provisioning.
  • Evidence: The SKILL.md file includes a complex bash script for automated backups and multi-resource Terraform configurations.
  • [DATA_EXFILTRATION]: The included backup script performs network operations to external endpoints for status notifications.
  • Evidence: The script uses 'curl' to send POST requests to a configurable '$NOTIFICATION_WEBHOOK'. While the content is limited to status messages in the template, it establishes an outbound network channel.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 25, 2026, 03:57 AM