create-service

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is designed to automate the creation of Harness service definitions, which is a standard task for developer productivity within the Harness ecosystem. It uses official MCP tools for resource creation.
  • [INDIRECT_PROMPT_INJECTION]: The skill analyzes local codebase files (e.g., serverless.yml, Chart.yaml) to automatically detect service types and artifact sources. While this ingestion of untrusted data theoretically represents an attack surface, the risk is minimal and inherent to the core functionality of a configuration-generation tool. The skill provides clear instructions to confirm detected parameters with the user before proceeding, which serves as a security checkpoint.
  • [EXTERNAL_DOWNLOADS]: The skill references several well-known and trusted cloud registries (Docker Hub, AWS ECR, Google GCR, Azure ACR) and artifact repositories. These are standard industry services used for containerized deployments and are documented neutrally as legitimate configuration options.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 05:22 AM