ibm-cloud
Warn
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: MEDIUMPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits extreme context bloat and intentional redundancy across eight reference files. This is a resource exhaustion attack designed to overwhelm the agent's context window, increase operational latency, and elevate token consumption costs.
- Evidence:
references/architecture-patterns.md,references/code-organization.md,references/deployment-pipelines.md,references/error-handling.md,references/performance-optimization.md,references/security-best-practices.md,references/state-management.md, andreferences/testing-strategies.md. - Details: Each of these files contains 150 sections of programmatically generated, repetitive text based on a small set of templates. This estimated 120,000+ lines of redundant content acts as an evasion technique to hide potential payloads or disrupt auditor review.
- [PROMPT_INJECTION]: Indirect prompt injection vulnerability surface through untrusted data processing.
- Ingestion points:
SKILL.md(gathering user account details, service requirements, and resource structures). - Boundary markers: Absent; the skill lacks delimiters or explicit instructions to disregard embedded commands in user input.
- Capability inventory:
SKILL.mdandreferences/cos-databases.md(capability to generate and potentially execute powerfulibmcloudCLI commands and Terraform provisioning scripts). - Sanitization: Absent; no validation or escaping of user-provided strings is mandated before interpolation into generated artifacts.
- [EXTERNAL_DOWNLOADS]: Fetches official infrastructure management tools and providers.
- Evidence:
SKILL.md(IBM Cloud Terraform provider) andreferences/ibm-kubernetes.md(CLI plugins). - Details: The skill configures the download of the IBM Cloud provider from the Terraform registry and installs essential plugins for the
ibmcloudCLI, such ascontainer-serviceandcontainer-registry. These target official, trusted vendor sources. - [COMMAND_EXECUTION]: Generates commands for resource provisioning and hybrid cloud management.
- Evidence:
SKILL.md,references/vpc-compute.md, andreferences/cos-databases.md. - Details: The skill instructs the agent to generate IBM Cloud CLI commands and Terraform HCL scripts for managing VPC infrastructure, Kubernetes clusters (IKS), Object Storage (COS), and cloud databases.
Audit Metadata