generate-incident-config
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill and its associated scripts follow security best practices for a configuration management tool. No suspicious code or hidden behaviors were found.
- [EXTERNAL_DOWNLOADS]: The skill references standard, well-known Python packages
PyYAMLandjsonschemaas prerequisites for its execution. - [COMMAND_EXECUTION]: The included script
starter_iri_config.pyexecutes local file system operations to read extension metadata and write YAML configurations. These actions are consistent with the skill's documented primary purpose. - [INDIRECT_PROMPT_INJECTION]: The skill provides a surface for ingesting configuration data from external files. It appropriately uses
yaml.safe_load()for parsing, which mitigates risks associated with unsafe deserialization of untrusted input.
Audit Metadata