jenkins-devops-acrazie

Pass

Audited by Gen Agent Trust Hub on Sep 6, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes repository-owned files and logs to generate or repair CI/CD pipelines, creating a surface for indirect instructions. Ingestion points: Jenkinsfiles, application manifests, lockfiles, and build logs. Boundary markers: Mandatory human approval gates for all durable decisions and repository edits, supported by a structured Compact Decision Proposal (ADR). Capability inventory: Repository file writes, remote build triggers, and remote API-based validation. Sanitization: Explicit constraints against secret exposure and instructions to use sanitized log data. \n- [EXTERNAL_DOWNLOADS]: The skill includes instructions to discover and install specialized sub-skills from the author's repository space using system-level commands like npx. \n- [DYNAMIC_EXECUTION]: Implements a 'Specialist Contract' that enables the runtime loading of stack-specific sub-skills based on the detected runtime stack of the repository. \n- [COMMAND_EXECUTION]: The skill requires executing various build, test, and deployment commands (e.g., pnpm, cargo, composer, docker) within the agent's workspace to validate or implement pipeline stages.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 6, 2026, 04:48 PM