gitops-status
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: No security issues detected. The skill uses official Harness MCP tools to monitor health and manage sync operations within a GitOps environment. All operations are documented and consistent with the skill's primary purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data that could potentially contain malicious instructions, such as pod logs and application events.
- Ingestion points: Reads application logs (
gitops_pod_log) and system events (gitops_app_event) viaharness_getandharness_list(SKILL.md). - Boundary markers: None present; the agent is instructed to directly examine log and event content for diagnosis.
- Capability inventory: Uses
harness_get,harness_list, andharness_execute(sync action). - Sanitization: No explicit sanitization or filtering of external content is described in the instructions.
- Risk Assessment: While this represents an attack surface, the risk is inherent to the primary debugging purpose of the skill and occurs within the authenticated context of the Harness platform.
Audit Metadata