skills/j4flmao/agent-skills/ibm-cloud/Gen Agent Trust Hub

ibm-cloud

Warn

Audited by Gen Agent Trust Hub on Jul 8, 2026

Risk Level: MEDIUMPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [PROMPT_INJECTION]: The skill exhibits extreme context bloat and intentional redundancy across eight reference files. This is a resource exhaustion attack designed to overwhelm the agent's context window, increase operational latency, and elevate token consumption costs.
  • Evidence: references/architecture-patterns.md, references/code-organization.md, references/deployment-pipelines.md, references/error-handling.md, references/performance-optimization.md, references/security-best-practices.md, references/state-management.md, and references/testing-strategies.md.
  • Details: Each of these files contains 150 sections of programmatically generated, repetitive text based on a small set of templates. This estimated 120,000+ lines of redundant content acts as an evasion technique to hide potential payloads or disrupt auditor review.
  • [PROMPT_INJECTION]: Indirect prompt injection vulnerability surface through untrusted data processing.
  • Ingestion points: SKILL.md (gathering user account details, service requirements, and resource structures).
  • Boundary markers: Absent; the skill lacks delimiters or explicit instructions to disregard embedded commands in user input.
  • Capability inventory: SKILL.md and references/cos-databases.md (capability to generate and potentially execute powerful ibmcloud CLI commands and Terraform provisioning scripts).
  • Sanitization: Absent; no validation or escaping of user-provided strings is mandated before interpolation into generated artifacts.
  • [EXTERNAL_DOWNLOADS]: Fetches official infrastructure management tools and providers.
  • Evidence: SKILL.md (IBM Cloud Terraform provider) and references/ibm-kubernetes.md (CLI plugins).
  • Details: The skill configures the download of the IBM Cloud provider from the Terraform registry and installs essential plugins for the ibmcloud CLI, such as container-service and container-registry. These target official, trusted vendor sources.
  • [COMMAND_EXECUTION]: Generates commands for resource provisioning and hybrid cloud management.
  • Evidence: SKILL.md, references/vpc-compute.md, and references/cos-databases.md.
  • Details: The skill instructs the agent to generate IBM Cloud CLI commands and Terraform HCL scripts for managing VPC infrastructure, Kubernetes clusters (IKS), Object Storage (COS), and cloud databases.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 8, 2026, 12:25 PM
Security Audit — agent-trust-hub — ibm-cloud