verify-ssi
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs the
pupCLI tool using Homebrew from a repository hosted by the vendor. This tool is required for interacting with APM services and verifying instrumentation configuration. - [COMMAND_EXECUTION]: Multiple shell commands are utilized to perform diagnostics, including:
kubectlfor inspecting pod specifications and executing commands within containers.pupfor authentication and querying APM service status.curlfor generating test traffic to a locally forwarded port.brewfor managing the installation of diagnostic dependencies.- [INDIRECT_PROMPT_INJECTION]: The skill processes external data to drive its logic, presenting a theoretical attack surface:
- Ingestion points: The skill reads the output of
kubectl get podandpup apm services listto verify instrumentation status. - Boundary markers: No specific delimiters are used to separate the external command output from the agent's logic.
- Capability inventory: The skill possesses the ability to execute shell commands (
kubectl,pup,curl,brew) and perform network operations viacurlandpup. - Sanitization: No explicit sanitization or validation of the ingested command output is performed before it is used to decide the next execution step.
- [CREDENTIALS_UNSAFE]: The skill instructs the user to set a
DD_APP_KEYenvironment variable as a fallback mechanism. The instructions explicitly warn against writing raw keys into chat or files, which follows secure credential management practices.
Audit Metadata