skills/binhmuc/autobot-review/devops/Gen Agent Trust Hub

devops

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install the Google Cloud SDK from official Google domains using curl https://sdk.cloud.google.com | bash.
  • [COMMAND_EXECUTION]: The scripts/cloudflare_deploy.py utility automates Worker deployments by executing the wrangler CLI via subprocess.run. The implementation uses structured argument lists to ensure safe execution.
  • [PRIVILEGE_ESCALATION]: Setup instructions for the Google Cloud CLI on Linux systems include the use of sudo for installing system packages through apt-get.
  • [INDIRECT_PROMPT_INJECTION]: The skill features scripts that ingest and analyze project configuration files, representing a potential indirect prompt injection surface:
  • Ingestion points: scripts/cloudflare_deploy.py reads wrangler.toml; scripts/docker_optimize.py reads Dockerfile content.
  • Capability inventory: The deployment utility has the capability to execute shell commands and perform local file operations.
  • Sanitization: Command execution relies on structured argument lists rather than raw shell strings, and parsed metadata is used primarily for logging.
  • [SAFE]: Sensitive credential management is handled appropriately through the use of .env.example templates, ensuring that API tokens and service account keys are not hardcoded or accidentally committed to version control.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 04:34 AM