generate-incident-config

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill and its associated scripts follow security best practices for a configuration management tool. No suspicious code or hidden behaviors were found.
  • [EXTERNAL_DOWNLOADS]: The skill references standard, well-known Python packages PyYAML and jsonschema as prerequisites for its execution.
  • [COMMAND_EXECUTION]: The included script starter_iri_config.py executes local file system operations to read extension metadata and write YAML configurations. These actions are consistent with the skill's documented primary purpose.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides a surface for ingesting configuration data from external files. It appropriately uses yaml.safe_load() for parsing, which mitigates risks associated with unsafe deserialization of untrusted input.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 03:21 PM