package-redis-operator-green
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The launcher script is designed to download the
redis-operatorlibrary from the author's GitHub repository at a specific pinned commit. - Evidence: The
greenscript contains the URLhttps://github.com/getcolors/redis-operator.gitand a pinned SHAf163b488eebbf11761b8d7f94a1507bd2cd17cadused for dependency resolution. - [DYNAMIC_EXECUTION]: The tool uses Babashka's dynamic dependency management and resolution to load its CLI and workflow logic at runtime.
- Evidence: The script calls
babashka.deps/add-depsto include the downloaded library andrequiring-resolveto execute commands from that library. - [COMMAND_EXECUTION]: The skill executes lifecycle commands that interact with Kubernetes clusters (via
kubectlcontext) and the DigitalOcean API. - Evidence: Usage patterns in
SKILL.mdincludebuild,create,check, anddrill, the latter of which involves destructive infrastructure operations (deleting Droplets) for recovery testing as a documented feature. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided configuration from
colors.yml, which represents an attack surface for indirect instructions. - Ingestion points: The
greenscript resolves and parsescolors.ymlto determine deployment state. - Boundary markers: Absent from the prompt instructions.
- Capability inventory: The skill has high-privilege capabilities including Kubernetes resource management and cloud infrastructure modification.
- Sanitization: The
references/configuration.mdfile notes that configurations are validated twice (by the launcher and the pinned Redis package) for valid shapes, providers, and restricted SSH source IP ranges.
Audit Metadata