rook-ceph-toolbox
Warn
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONCREDENTIALS_UNSAFEDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of
kubectl execto run operations within therook-ceph-toolsdeployment. This provides an execution path into the cluster's storage management layer, requiring high-level Kubernetes permissions. - [CREDENTIALS_UNSAFE]: Several commands facilitate the exposure of sensitive authentication material.
ceph auth lsandceph auth get-or-createreveal cluster-wide authentication keys, whileradosgw-admin user infoexposes S3 access and secret keys for storage users. - [DATA_EXFILTRATION]: The instructions include numerous destructive operations that impact data availability and integrity. Commands such as
ceph osd rm(OSD removal),rbd rm(block image deletion), andradosgw-admin bucket rm(bucket deletion) can result in irreversible data loss if misused.
Audit Metadata