devops-specialist
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided DevOps instructions (e.g., "Deploy to staging") and uses high-privilege tools such as
BashandWriteto perform infrastructure tasks. - Ingestion points: External data enters through user prompt commands related to deployment and configuration.
- Boundary markers: The skill does not define explicit delimiters or instructions to ignore embedded commands in the processed infrastructure templates or scripts.
- Capability inventory: The skill possesses the
Bash,Write,Read, andGlobtools, enabling file system modification and command execution. - Sanitization: No explicit sanitization or validation logic is defined within the skill instructions to filter potentially malicious user-provided parameters or script content.
Audit Metadata