package-agent-network-doks-green
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The
greenlauncher script dynamically loads and resolves theagent-network-doksandgreenlibraries at runtime using Babashka's dependency management.\n - Evidence: The script uses
babashka.deps/add-depsandrequiring-resolveto execute functions from libraries not present on the initial classpath.\n- [EXTERNAL_DOWNLOADS]: The skill downloads source code from the author's repositories on GitHub during the bootstrap process.\n - Evidence: The
greenscript referenceshttps://github.com/getcolors/agent-network-doks.gitandhttps://github.com/getcolors/green.gitfor library resolution.\n- [INDIRECT_PROMPT_INJECTION]: The skill deploys an AI agent (Claude Code) intended to process external data through a NetBird gateway, which presents an attack surface for indirect prompt injection.\n - Ingestion points: Data entering the
isolated agentpod through the NetBird SOCKS5 gateway.\n - Boundary markers: Infrastructure includes
NetworkPolicyandmodel allowliststo limit reach, but does not specify prompt-level delimiters for data isolation.\n - Capability inventory: The deployment environment includes
kubectlaccess and DigitalOcean API integration via theCOLORS_PAR_DO_TOKEN.\n - Sanitization: No specific input sanitization for the agent's natural language processing is described.
Audit Metadata