buildkite-api
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous examples and patterns using
curl,jq, and shell scripting to interact with the Buildkite API. These commands are intended for the user to execute in a terminal or automated environment for tasks such as triggering builds or creating pipelines. - [DATA_EXFILTRATION]: The skill provides patterns to send configuration and status data to
api.buildkite.comandgraphql.buildkite.com. As these are the official API endpoints for the skill's author (Buildkite), this represents expected functional behavior for an API integration skill. - [INDIRECT_PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection through the processing of user-supplied data.
- Ingestion points: Variable inputs such as organization slugs, pipeline names, and YAML configurations in
SKILL.mdandreferences/patterns.mdare used to construct API requests. - Boundary markers: The skill does not employ explicit boundary delimiters for user-provided identifiers, although it uses
jqto structure JSON payloads safely. - Capability inventory: The skill possesses the capability to perform network requests via
curland process JSON data usingjq. - Sanitization: The instructions recommend local validation of YAML configurations prior to submission, but they do not define specific sanitization or filtering for all variable inputs.
Audit Metadata