package-redis-operator-blue
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The launcher script
bluedownloads the operator package directly from the author's repository atgithub.com/getcolors/redis-operator.gitusing a specific, immutable commit hash (9303aa2d9b7b93827035f0e229c863a16739a572). This represents a verified vendor resource. - [COMMAND_EXECUTION]: The skill uses
subprocess.runwithin thebluescript to invoke the operator's Python module and pass command-line arguments provided by the user. - [DATA_EXPOSURE]: The skill manages sensitive credentials, including DigitalOcean API tokens and R2 access keys, which are supplied by the user via environment variables and subsequently stored in Kubernetes Secrets.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external configuration data from
colors.ymlto orchestrate infrastructure changes. - Ingestion points: Configuration file
colors.ymland environment variables prefixed withCOLORS_PAR_*. - Boundary markers: Detailed validation schemas and expected formats are defined in
references/configuration.md. - Capability inventory: The skill utilizes subprocess execution, network requests to cloud provider APIs, and local filesystem modifications within the
.colors/directory. - Sanitization: Data is validated against internal schemas and provider-specific requirements before execution.
Audit Metadata