redis
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous shell commands for system administration tasks, such as creating directories, writing configuration files, and managing Redis server processes. For example,
examples/04-redis-cluster-setup.mdcontains instructions for setting up a 6-node cluster usingmkdir,cat(for config writing),redis-server, andredis-cli. - [DYNAMIC_EXECUTION]: The skill documents and provides examples of Lua scripts for use with the Redis
EVALcommand to perform atomic operations. These are featured inSKILL.md(Section 5.2) andreferences/commands-admin-key.md(Section 3). - [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection through the following components:
- Ingestion points: The skill provides instructions and code examples for fetching data from external Redis servers using commands such as
GET,HGETALL,LRANGE, andXREADacross multiple reference files. - Boundary markers: There are no instructions for the agent to use delimiters or ignore instructions embedded within the data retrieved from Redis.
- Capability inventory: The skill includes powerful capabilities such as file system writes and process execution via
redis-serverandredis-cli(detailed inexamples/04-redis-cluster-setup.md). - Sanitization: There is no evidence of input sanitization or escaping protocols for data retrieved from external stores before it is processed by the agent.
Audit Metadata