chaos-engineering
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download and install Kubernetes operators and experiment definitions from official sources including litmuschaos.github.io and chaos-mesh.org. These are well-known services for the chaos engineering domain.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials were found in any files. Sensitive identifiers and API keys are handled appropriately using environment variables (e.g., $GREMLIN_API_KEY) or placeholder values in templates.
- [PROMPT_INJECTION]: Reference templates in references/chaos-practices.md demonstrate data ingestion patterns for variables like chaos_target. While this represents an indirect injection surface, it is consistent with the skill's purpose as a management tool and is mitigated by the use of structured YAML templates rather than free-text interpolation in execution contexts.
- [COMMAND_EXECUTION]: The skill facilitates the execution of Kubernetes (kubectl) and Helm commands to manage system resilience experiments. All commands are scoped to the primary purpose of the skill and utilize standard CLI patterns for DevOps tooling.
Audit Metadata