traefik
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill provides configuration examples that mount the Docker socket (
/var/run/docker.sock) to enable Traefik's service discovery. While this is the standard operating procedure for the tool, the Docker socket is a sensitive path that grants significant visibility into the container environment. The documentation follows best practices by recommending read-only (:ro) mounting to mitigate risk. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the generation of infrastructure configuration (Docker labels and Kubernetes IngressRoute manifests) using external parameters like Host rules and path prefixes.
- Ingestion points: User-supplied values for routing rules and middleware configuration in SKILL.md.
- Boundary markers: The templates lack explicit delimiters or warnings to ignore embedded instructions in variable fields.
- Capability inventory: The skill is used to generate deployment-critical networking configuration files.
- Sanitization: No instructions are provided for validating or escaping user-supplied strings before they are interpolated into the resulting labels or YAML manifests.
Audit Metadata