consul
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides various Consul CLI commands for service registration, health monitoring, and KV store management. These are appropriate for the tool's DevOps purpose and are accompanied by instructions to avoid hardcoding secrets.
- [INDIRECT_PROMPT_INJECTION]: The skill documents procedures for reading data from external sources like the Consul catalog and health check endpoints. This constitutes a potential attack surface for indirect prompt injection if the external data were to contain malicious instructions. However, the skill explicitly instructs the agent to separate secrets from configuration and to follow least-privilege principles, which mitigates risk.
- Ingestion points: Consul HTTP API/CLI output (health, catalog, KV).
- Boundary markers: Not explicitly defined in these instructional files.
- Capability inventory: Consul CLI commands, bash scripting, DNS lookups.
- Sanitization: Not explicitly implemented in the provided scripts.
Audit Metadata