eks-upgrade-check
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external project documentation and cluster resource metadata to perform compatibility assessments. Risks are mitigated by a provided sanitization script that escapes HTML and validates URL schemes in the final report.\n- [COMMAND_EXECUTION]: The skill uses the
Bashtool to run standardawsandkubectlcommands for resource discovery and inspection. All operations are focused on configuration analysis and do not execute arbitrary user input.\n- [EXTERNAL_DOWNLOADS]: The skill fetches documentation and compatibility matrices from official GitHub repositories and project websites for established open-source tools. These sources are trusted and the downloads are restricted to informational documentation.
Audit Metadata