teleport-discovery
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to runtsh,tctl,terraform, andazcommands. This is required for authenticating with Teleport, checking cluster status, and managing cloud resources. - [COMMAND_EXECUTION]: In
SKILL.md, the agent is instructed to useeval "$(tctl terraform env)"to inject short-lived credentials into the shell environment for Terraform commands. This is a standard procedure for Teleport's Terraform integration. - [COMMAND_EXECUTION]: Supporting evaluation scripts in
evals/run_evals.pyandevals/_claude_util.pyutilize thesubprocessmodule to execute CLI tools and mock binaries during testing and grading. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it processes structured output from
tctlcommands to diagnose enrollment failures. - Ingestion points: JSON output from
tctl discovery nodesandtctl get user_tasksinSKILL.md. - Boundary markers: None. Output is parsed directly for failure details.
- Capability inventory: Access to
Bash(for Terraform) and file modification viaWrite/Edittools. - Sanitization: No explicit sanitization or filtering of the tool output is described.
- [SAFE]: The skill performs a
WebFetchfromhttps://goteleport.com/docs/...to retrieve troubleshooting guidelines. This targets the official documentation of the vendor and is considered a safe operation.
Audit Metadata