blue-green-deployment
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Several scripts in the
references/directory interpolate user-defined shell variables directly into commands without proper sanitization or quoting. For example, indeploy-blue-green.sh, the$VERSIONvariable is used in akubectl set imagecommand, and invalidate-schema.sh, the$SCHEMA_FILEvariable is used directly. This pattern allows for command injection if an attacker can control these input variables. - [INDIRECT_PROMPT_INJECTION]: The skill exposes an attack surface for indirect prompt injection by processing untrusted input variables in scripts that perform high-privilege operations.
- Ingestion points: Shell script arguments in
references/blue-green-with-load-balancer.md,references/blue-green-rollback-script.md, andscripts/validate-schema.sh(e.g.,$ENVIRONMENT,$VERSION,$SCHEMA_FILE). - Boundary markers: None. The scripts do not implement input validation, schema enforcement, or boundary delimiters for the processed variables.
- Capability inventory: The skill uses
kubectl(set image, patch, exec, port-forward, rollout) andawsCLI (modify-listener, describe-target-groups), providing significant control over infrastructure. - Sanitization: Absent. Input variables are interpolated directly into shell strings without escaping or validation.
Audit Metadata