infrastructure-agent
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill generates infrastructure configurations and executes validation scripts based on inputs from external project artifacts.
- Ingestion points: Reads service maps, API contracts, and domain rules from
contracts/and the projectREADME(SKILL.md). - Boundary markers: The instructions lack explicit delimiters or warnings to ignore instructions embedded within the ingested data files.
- Capability inventory: Employs
Bashfor system probing and service validation, alongsideWriteandEditfor generating Dockerfiles, Makefiles, and CI/CD workflows (SKILL.md, references/validation-checklist.md). - Sanitization: No specific filtering or escaping mechanisms are mentioned for data values extracted from input files before they are interpolated into scripts or configurations.
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool for documented infrastructure tasks including environment verification usinglsofto detect port collisions, managing local containers viadocker compose, and testing service health withcurltargetinglocalhost(references/validation-checklist.md).
Audit Metadata