devops-deployer
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or credential theft vectors were detected in the skill instructions or metadata. The skill focuses on providing a structured workflow for deployment and monitoring automation.
- [INDIRECT_PROMPT_INJECTION]: The skill operates as a high-level orchestrator that ingests user requirements to generate infrastructure and CI/CD code, creating a surface for indirect prompt injection.
- Ingestion points: User-supplied application architecture and deployment constraints enter the context via interaction triggers and deployment analysis phases.
- Boundary markers: The instructions do not specify any delimiters or safety guardrails to isolate user-supplied data from the generated output logic.
- Capability inventory: The skill facilitates broad capabilities including file-write operations for Terraform, Jenkins, and Kubernetes manifests, alongside interaction with external CLI tools.
- Sanitization: No input validation or sanitization routines are mentioned for user-provided configuration strings before they are incorporated into generated scripts.
Audit Metadata