devops-engineer
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous templates and reference scripts involving CLI tools such as
kubectl,terraform,docker, andgh(GitHub CLI). These are used for standard DevOps tasks like deployment orchestration, infrastructure provisioning, and service scaffolding. - [INDIRECT_PROMPT_INJECTION]: The skill includes automation scripts (e.g.,
create-service.sh,platform-cli) that process user-supplied parameters to generate configuration files and repositories. The risk is minimized as these are standard developer tools intended for local environment use. - [EXTERNAL_DOWNLOADS]: Reference templates include instructions for installing dependencies via
npm,pip, andpoetry, and utilizing official GitHub Actions. All external references target well-known services and repositories (e.g., GitHub, Docker Hub). - [DATA_EXPOSURE]: The skill includes constraints that explicitly forbid storing secrets in code or environment files, recommending secret managers (AWS SSM, Vault) instead, which aligns with industry security standards.
Audit Metadata