managing-certificates-and-encryption
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate, instructional content for database and infrastructure administration, with no malicious patterns detected.
- [DATA_EXPOSURE]: The skill involves the management of sensitive cryptographic files (e.g.,
ca.key,node.key). It provides appropriate security guidance by instructing the user to set0600file permissions and store high-value keys like the Root CA key in secure, offline locations. - [COMMAND_EXECUTION]: The skill includes shell commands for cluster administration using
cockroach,openssl,kubectl,aws,gcloud, andaz. These commands are standard for the described tasks and are used within a context that requires administrative intervention. - [EXTERNAL_DOWNLOADS]: The skill refers to official vendor documentation and well-known infrastructure services (e.g.,
cockroachlabs.com,cert-manager.io,github.com/stakater/Reloader). These references are consistent with standard industry practices for database management and monitoring. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface through the processing of local certificate files and outputs from administrative tools (
openssl,kubectl,curl). This capability is appropriate for its primary function of certificate health monitoring and rotation.
Audit Metadata