tekton-pipelines
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill describes patterns for ingesting untrusted or external data into a high-capability execution environment (Tekton CI/CD).
- Ingestion points: Found in
SKILL.mdviaparams.repo-url, matrix parameter substitution, and Common Expression Language (CEL) expressions processingbodypayloads. - Boundary markers: Absent; no specific delimitation or 'ignore instructions' warnings are provided for these interpolation points.
- Capability inventory: The environment supports arbitrary shell execution via
scriptblocks and remote resource fetching viagitandhubresolvers. - Sanitization: No input validation or sanitization logic is described for the external parameters.
- [EXTERNAL_DOWNLOADS]: The skill documents the use of Tekton resolvers to fetch pipeline components from external repositories.
- Evidence:
SKILL.mddemonstrates fetching task YAML from repositories via thegitresolver using thetaskRefmechanism. - [COMMAND_EXECUTION]: The skill includes examples of executing shell commands within the context of a pipeline step.
- Evidence: A
scriptblock inSKILL.mdperforms agit cloneoperation using a parameter-driven URL.
Audit Metadata