managing-tls-certificates
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous administrative commands using openssl, ccloud, and cockroach CLI for managing the lifecycle of TLS certificates. These include generating keys, signing certificates, and reloading the cockroach service via SIGHUP. These operations are standard and necessary for the skill's stated administrative purpose.
- [CREDENTIALS_UNSAFE]: Connection examples in the reference files use placeholders like and the well-known default Java keystore password changeit. These are intended for documentation and tutorial purposes and do not represent hardcoded secrets for any live systems.
- [INDIRECT_PROMPT_INJECTION]: The skill guides the agent to process user-supplied parameters such as cluster IDs and usernames to generate connection strings and commands. While this creates a potential injection surface for malicious input, the instructions follow best practices by using clear delimiters and placeholders.
Audit Metadata