loki-config-generator
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The test script
scripts/test_generate_config.pyutilizessubprocess.runto execute the local generator script for validation purposes, establishing a subprocess execution boundary.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests user input via CLI arguments to construct and write configuration files. This surface could be targeted to write content to unauthorized paths.\n - Ingestion points: CLI arguments in
scripts/generate_config.pylike--output,--bucket, and--region.\n - Boundary markers: None present in the string-templated YAML generation.\n
- Capability inventory: Writing to the filesystem in
scripts/generate_config.pyand subprocess execution inscripts/test_generate_config.py.\n - Sanitization: Input validation is performed on specific fields like dates and modes, but output paths and generic string values are not strictly sanitized.
Audit Metadata