sops-age-secrets
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download the sops binary from its official GitHub repository in CI/CD environments (e.g., https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.amd64). This is documented as a standard setup procedure for CI/CD pipelines.\n- [COMMAND_EXECUTION]: The instructions rely on shell commands for encryption, decryption, key generation, and environment management (e.g., sops, age-keygen, curl, and git).\n- [PRIVILEGE_ESCALATION]: CI/CD integration examples include the use of sudo to install the sops binary into system-wide executable paths (e.g., sudo mv sops... /usr/local/bin/sops).\n- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided data files, which presents a surface for potential indirect prompt injection if those files contain malicious instructions.\n
- Ingestion points: Reading and processing YAML, JSON, and ENV files via sops decrypt and sops edit (SKILL.md, references/cli-reference.md).\n
- Boundary markers: The instructions do not use specific delimiters or warnings to isolate external data from the agent's control context.\n
- Capability inventory: The skill utilizes file system access, network operations for tool installation, and extensive command execution capabilities.\n
- Sanitization: No explicit sanitization or validation of the content within the encrypted/decrypted files is performed before or after processing.
Audit Metadata