sre-engineer

Warn

Audited by Gen Agent Trust Hub on Mar 27, 2026

Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The AutomatedRunbook class in references/automation-toil.md utilizes subprocess.run with shell=True to execute runbook steps. This pattern is susceptible to command injection if the command strings are constructed from unsanitized external input.
  • [COMMAND_EXECUTION]: The SelfHealer implementation in references/automation-toil.md and the chaos engineering patterns in references/incident-chaos.md involve executing high-privilege system commands, including service management (systemctl), network configuration (iptables, tc), and container orchestration (kubectl).
  • [COMMAND_EXECUTION]: The skill provides templates for automated disk cleanup that execute file system operations like find and delete on sensitive paths such as /var/log.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 27, 2026, 07:23 AM