package-redis-operator-blue

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The launcher script blue downloads the operator package directly from the author's repository at github.com/getcolors/redis-operator.git using a specific, immutable commit hash (9303aa2d9b7b93827035f0e229c863a16739a572). This represents a verified vendor resource.
  • [COMMAND_EXECUTION]: The skill uses subprocess.run within the blue script to invoke the operator's Python module and pass command-line arguments provided by the user.
  • [DATA_EXPOSURE]: The skill manages sensitive credentials, including DigitalOcean API tokens and R2 access keys, which are supplied by the user via environment variables and subsequently stored in Kubernetes Secrets.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external configuration data from colors.yml to orchestrate infrastructure changes.
  • Ingestion points: Configuration file colors.yml and environment variables prefixed with COLORS_PAR_*.
  • Boundary markers: Detailed validation schemas and expected formats are defined in references/configuration.md.
  • Capability inventory: The skill utilizes subprocess execution, network requests to cloud provider APIs, and local filesystem modifications within the .colors/ directory.
  • Sanitization: Data is validated against internal schemas and provider-specific requirements before execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 02:45 PM