aiven-kafka-setup-avn

Pass

Audited by Gen Agent Trust Hub on May 6, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXPOSURE]: The skill implements proactive measures to protect user credentials. The scripts/setup_aiven_kafka.sh script extracts service passwords and writes them to a local env.sh file. Crucially, the instructions in SKILL.md and SERVICE_CREATION_AVN.md explicitly forbid the AI agent from reading or printing the contents of this file, directing it to verify variable presence by length only. This prevents sensitive authentication tokens from being leaked into the model's conversation history.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes standard package management tools (pip and Maven) to install necessary libraries. It fetches dependencies from official and well-known sources, including Maven Central and the official Confluent Maven repository (https://packages.confluent.io/maven/). These are recognized as trusted sources for Apache Kafka ecosystem components.
  • [COMMAND_EXECUTION]: The skill performs local command execution to compile Java code and run Python scripts. These operations are transparently documented and restricted to the templates/ and scripts/ directories provided within the skill. The execution of the avn CLI is the primary purpose of the skill and is handled via restricted tool access.
Audit Metadata
Risk Level
SAFE
Analyzed
May 6, 2026, 03:19 PM