agent-network-doks
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill identifies ingestion points for data from external sources that are used to drive configuration and verification, creating a surface for potential indirect prompt injection attacks.\n
- Ingestion points: The skill reads cluster state (pod IPs, ClusterIPs) and Cloud API data (load balancer firewall rules, container registry digests) as described in
references/acceptance.mdandreferences/failure-catalogue.md.\n - Boundary markers: No specific delimiters or instructions to ignore embedded commands are documented for the data received from these external APIs.\n
- Capability inventory: The skill utilizes significant system capabilities including
kubectlfor manifest application andcurlfor interacting with the NetBird management API as described inSKILL.md.\n - Sanitization: While the skill performs validation on CIDR membership, it does not explicitly describe sanitization or escaping of data retrieved from cloud and cluster APIs before it is used in automation logic.\n- [EXTERNAL_DOWNLOADS]: The skill relies on external software components and images from known and vendor-specific sources.\n
- Evidence: References verified container images for
netbird-server,reverse-proxy,traefik, andkanikofrom their respective official repositories inreferences/pins.md.\n - Evidence: Mentions a reference implementation and package skill hosted in the author's (
getcolors) GitHub repository.
Audit Metadata