aiven-kafka-setup-avn
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The skill implements proactive measures to protect user credentials. The
scripts/setup_aiven_kafka.shscript extracts service passwords and writes them to a localenv.shfile. Crucially, the instructions inSKILL.mdandSERVICE_CREATION_AVN.mdexplicitly forbid the AI agent from reading or printing the contents of this file, directing it to verify variable presence by length only. This prevents sensitive authentication tokens from being leaked into the model's conversation history. - [EXTERNAL_DOWNLOADS]: The skill utilizes standard package management tools (
pipandMaven) to install necessary libraries. It fetches dependencies from official and well-known sources, including Maven Central and the official Confluent Maven repository (https://packages.confluent.io/maven/). These are recognized as trusted sources for Apache Kafka ecosystem components. - [COMMAND_EXECUTION]: The skill performs local command execution to compile Java code and run Python scripts. These operations are transparently documented and restricted to the
templates/andscripts/directories provided within the skill. The execution of theavnCLI is the primary purpose of the skill and is handled via restricted tool access.
Audit Metadata