aap-lint
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions direct users to clone and synchronize code from an external repository at
https://github.com/sibilleb/AAP-Enterprise-MCP-Server. This repository is not associated with a recognized trusted organization or well-known service. - [COMMAND_EXECUTION]: The skill requires the execution of
python3andansible-lintvia a wrapper script (ansible-lint.py) usinguv run. This creates a dependency on the integrity of the external wrapper script and the local environment. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection by processing external Ansible playbooks, roles, and project files.
- Ingestion points: Tools such as
lint_playbook,lint_file,lint_role, andanalyze_projectingest user-supplied Ansible content. - Boundary markers: The skill documentation does not specify the use of delimiters or instructions to ignore embedded commands within the playbooks being analyzed.
- Capability inventory: The skill executes subprocesses via
ansible-lintto validate the ingested content. - Sanitization: There is no evidence of sanitization or filtering of the content before it is processed by the linting engine.
Audit Metadata