upgrading-cluster-version
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for utilizing
sudo systemctlto stop and start the database service on self-hosted instances. This is a standard administrative requirement for database binary replacement and maintenance. - [DATA_EXFILTRATION]: The skill includes a
curlcommand targetingcockroachlabs.cloudto retrieve cluster version information. This operation communicates with the official vendor API and aligns with the skill's documented functionality. - [CREDENTIALS_UNSAFE]: The skill references an environment variable named
$COCKROACH_API_KEYfor authenticating cloud API requests. This follows security best practices by utilizing environment-based secret management instead of hardcoding credentials within the skill itself.
Audit Metadata