pyats-f5-platform
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a bash template to execute
pyats_run_show_commandvia a Python wrapper. This execution is scoped to legitimate platform monitoring tasks and is the primary intended purpose of the skill. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill documents access to sensitive endpoints such as
/mgmt/tm/sys/crypto/keyand/mgmt/tm/sys/crypto/master-key. However, these are listed in the context of platform auditing and health checks. There is no evidence of unauthorized exfiltration to external or untrusted domains. - [CREDENTIALS_UNSAFE]: The skill correctly uses environment variable placeholders (
%ENV{F5_USERNAME},%ENV{F5_PASSWORD}) for device authentication, adhering to secure secret management practices. - [SAFE]: No obfuscation, prompt injection, persistence mechanisms, or unauthorized privilege escalation patterns were detected. All described workflows are consistent with network administration and infrastructure auditing tasks.
Audit Metadata