managing-certificates-and-encryption
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several standard command-line tools (aws, gcloud, az, kubectl, openssl, and cockroach) to perform cluster administration and monitoring. These commands are necessary for the stated purpose of managing certificates and cloud KMS keys.
- [DATA_EXFILTRATION]: Communicates with 'cockroachlabs.cloud' to retrieve CMEK status. This is a vendor-owned domain used for legitimate administrative purposes, and the skill correctly recommends using an environment variable ($COCKROACH_API_KEY) rather than hardcoding credentials.
- [SAFE]: No malicious patterns such as prompt injection, obfuscation, or persistence mechanisms were detected. The skill includes clear safety warnings regarding high-risk operations like CA rotation and CMEK revocation.
Audit Metadata