managing-certificates-and-encryption

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides legitimate, instructional content for database and infrastructure administration, with no malicious patterns detected.
  • [DATA_EXPOSURE]: The skill involves the management of sensitive cryptographic files (e.g., ca.key, node.key). It provides appropriate security guidance by instructing the user to set 0600 file permissions and store high-value keys like the Root CA key in secure, offline locations.
  • [COMMAND_EXECUTION]: The skill includes shell commands for cluster administration using cockroach, openssl, kubectl, aws, gcloud, and az. These commands are standard for the described tasks and are used within a context that requires administrative intervention.
  • [EXTERNAL_DOWNLOADS]: The skill refers to official vendor documentation and well-known infrastructure services (e.g., cockroachlabs.com, cert-manager.io, github.com/stakater/Reloader). These references are consistent with standard industry practices for database management and monitoring.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface through the processing of local certificate files and outputs from administrative tools (openssl, kubectl, curl). This capability is appropriate for its primary function of certificate health monitoring and rotation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 03:34 PM