add-new-configuration
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to executepython scripts/supported_configurations.py. This script regenerates internal Python modules and performs validation checks against the current repository state. - [DYNAMIC_EXECUTION]: The skill triggers the regeneration of the
ddtrace/internal/settings/_supported_configurations.pysource file. This runtime modification of project code is driven by the data manually entered intosupported-configurations.json. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect injection as it ingests user-supplied environment variable names, descriptions, and default values, which are then written to persistent project files and processed by the generation script.
- Ingestion points: The agent is instructed to add user-provided data to
supported-configurations.jsonanddocs/configuration.rst. - Boundary markers: No specific delimiters or safety instructions are used to wrap the interpolated user content.
- Capability inventory: The skill utilizes
Editfor file modification andBashfor command execution, allowing the ingested data to potentially influence script behavior. - Sanitization: There is no evidence of sanitization, escaping, or schema validation for the input strings before they are written to disk.
Audit Metadata