devops-engineer
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides automated scripts for incident response, platform engineering, and release management that interact directly with infrastructure components using
kubectl,terraform,docker, and the GitHubghCLI. - [DATA_EXFILTRATION]: Includes a forensic evidence collection script (
collect-evidence.sh) that gathers sensitive diagnostic data, including system logs, database activity (pg_stat_activity), and network packet captures (tcpdump), though these are stored in a local directory for analysis. - [INDIRECT_PROMPT_INJECTION]: The skill processes complex configuration data, which presents an attack surface for indirect prompt injection.
- Ingestion points: Deployment manifests, GitHub Action workflows, and Terraform HCL templates in
references/andSKILL.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the templates.
- Capability inventory: Extensive system access via
kubectl,terraform,docker, and theghCLI across multiple reference scripts. - Sanitization: No explicit sanitization or validation logic is defined for data interpolated into configuration templates.
Audit Metadata