infra-optimization
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the repository being analyzed, which could contain malicious instructions designed to influence the agent's actions during infrastructure optimization.
- Ingestion points: The
scripts/discover_infra.pyscript reads content frompackage.jsonand scans the filesystem for various infrastructure-related file paths and directories. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to disregard potential commands embedded within the discovered file names or
package.jsonmetadata. - Capability inventory: The skill allows the agent to modify the filesystem by filling out checklists, generating reports, and implementing infrastructure changes if requested.
- Sanitization: The discovery script performs basic JSON parsing of
package.jsonbut does not sanitize the resulting strings before they are presented to the agent's context.
Audit Metadata