support-infrastructure-maintainer
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates as an infrastructure maintenance assistant. All provided code snippets (Terraform, Prometheus, and Bash) are standard configuration templates intended for system administration tasks.
- [COMMAND_EXECUTION]: Provides a comprehensive bash script and Terraform configurations for infrastructure management. The script handles system backups and cloud resource provisioning, which are core components of the skill's stated purpose.
- [DATA_EXFILTRATION]: The provided backup script is designed to transfer archived system data (from
/etc,/var/www/uploads, and databases) to external destinations like AWS S3 and Slack webhooks. This is a transparently documented feature of the utility. - [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for analyzing system logs and performance reports, creating an inherent attack surface for indirect prompt injection from the system data it processes.
- Ingestion points: Reads and analyzes system logs (
/var/log), application logs, and database metrics. - Boundary markers: No explicit markers are defined in the templates to separate untrusted log data from agent instructions.
- Capability inventory: The maintenance script contains file archiving (
tar), encryption (gpg), and network transmission (curl,aws s3) capabilities. - Sanitization: Relies on the standard security of the underlying CLI tools; no additional sanitization of processed log content is specified.
Audit Metadata