chaos-engineer
Warn
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous scripts and commands intended for execution on infrastructure, including resource exhaustion, network latency injection, and container termination.
- Evidence:
references/infrastructure-chaos.mdcontains commands forstress-ng,iperf3, andpumbato saturate CPU, memory, and network resources. - Evidence:
references/chaos-tools.mdincludes a bash script that usesaws ec2 terminate-instancesto simulate Chaos Monkey behavior. - [PRIVILEGE_ESCALATION]: Several provided scripts require administrative privileges (sudo) to modify system configurations or install tools.
- Evidence:
references/infrastructure-chaos.mdusessudo apt-get install -y stress-ngto install testing tools. - Evidence:
references/infrastructure-chaos.mdusessudo sh -c 'echo "127.0.0.1 {domain}" >> /etc/hosts'to simulate DNS failures by modifying system network files. - [EXTERNAL_DOWNLOADS]: The skill automates the download and application of Kubernetes manifests from remote sources.
- Evidence:
references/chaos-tools.mdcontains a command tokubectl applya manifest directly fromhttps://litmuschaos.github.io/litmus/litmus-operator-v2.14.0.yaml. - [INDIRECT_PROMPT_INJECTION]: The skill features an attack surface for indirect injection by processing data from external monitoring systems and infrastructure APIs without explicit sanitization patterns.
- Ingestion points:
references/chaos-tools.md(Prometheus API),references/kubernetes-chaos.md(Kubernetes API). - Boundary markers: Absent.
- Capability inventory:
references/infrastructure-chaos.md(subprocess.run),references/chaos-tools.md(shexecution in Jenkins/GitHub Actions). - Sanitization: Absent.
Audit Metadata