chaos-engineer
Fail
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The CI/CD examples in
references/chaos-tools.mdexecute configuration directly from an external source viakubectl apply -f https://litmuschaos.github.io/litmus/litmus-operator-v2.14.0.yaml. This is a documented method for deploying the Litmus operator.- [COMMAND_EXECUTION]: The skill provides scripts that interact with high-privileged CLI tools, includingaws ec2 terminate-instancesfor cloud infrastructure manipulation andkubectl deletefor Kubernetes cluster management. These are used to simulate service disruptions as part of chaos experiments.- [PRIVILEGE_ESCALATION]: Thereferences/infrastructure-chaos.mdscript usessudoto append entries to/etc/hostsand to perform system-level operations like package installation withapt-getand resource testing withstress-ng.- [EXTERNAL_DOWNLOADS]: The skill references external binaries and manifests from well-known sources, including Litmus Chaos, Toxiproxy, and Gremlin APIs, across the reference documentation and implementation scripts.- [INDIRECT_PROMPT_INJECTION]: The skill possesses a powerful capability set (AWS, Kubernetes, and OS-level access) and ingests user-defined system data, creating an attack surface for instructions embedded in external logs or documentation. - Ingestion points: System descriptions and experiment parameters provided in
SKILL.mdandreferences/game-days.md. - Boundary markers: None identified in the provided templates.
- Capability inventory: Subprocess calls for cloud provider APIs, container orchestration tools, and system resource managers.
- Sanitization: No validation or sanitization of input data before its interpolation into command-line arguments or experiment manifests was found.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata