teleport-session-review
Pass
Audited by Gen Agent Trust Hub on Jun 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes 'tsh' and 'tctl' binaries to manage Teleport sessions. Commands include 'tsh status', 'tsh play', and 'tctl recordings search/ls/download'.
- [PROMPT_INJECTION]: The skill processes session metadata and AI summaries which are subject to indirect prompt injection. An example payload in 'evals/files/recordings-search.json' attempts to override instructions to auto-download recordings.
- [PROMPT_INJECTION]: Ingestion points: 'tctl' JSON output containing labels, resource names, and summaries.
- [PROMPT_INJECTION]: Boundary markers: 'references/SECURITY.md' defines strict rules to treat output as untrusted and conceptually delimited.
- [PROMPT_INJECTION]: Capability inventory: Shell execution of 'tctl' and 'tsh' binaries for session management.
- [PROMPT_INJECTION]: Sanitization: Skill instructions mandate UUID validation for session IDs and prohibit passing free-text metadata to shell commands.
- [EXTERNAL_DOWNLOADS]: Fetches public cluster configuration from the Teleport proxy using 'curl' to verify feature availability.
Audit Metadata