shell-scripting
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and provides installation instructions for established development utilities such as jq, yq, ShellCheck, and Bats-core. These tools are sourced from well-known package managers and official GitHub repositories.
- [COMMAND_EXECUTION]: The skill includes numerous shell script examples and templates designed for system automation, CI/CD pipelines, and container orchestration. These scripts use standard command execution patterns with a strong emphasis on error handling (e.g., set -euo pipefail) and cleanup routines using trap handlers.
- [INDIRECT_PROMPT_INJECTION]: The documentation covers patterns for processing data from external sources such as APIs and configuration files. It provides a defensive programming checklist and advocates for the use of structured parsing tools like jq to handle external content safely, reducing the risk of data poisoning or command injection.
- [DATA_EXFILTRATION]: Reference examples demonstrate how to implement structured logging and notifications, including a pattern for sending error messages to a Slack webhook. This is documented as a standard practice for CI/CD notification and system monitoring rather than an exfiltration vector.
Audit Metadata