devops-engineer
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous templates and instructions for executing powerful command-line tools including
kubectl,terraform,docker,aws, andgh. These are used for deploying infrastructure, managing containers, and performing incident forensics (e.g.,tcpdumpincollect-evidence.sh). - [DYNAMIC_EXECUTION]: The skill includes Python and Shell script templates for automation tasks such as auto-remediation of incidents, platform engineering APIs, and release orchestration. These scripts are intended for use by a DevOps engineer to automate operational workflows.
- [INDIRECT_PROMPT_INJECTION]: As a DevOps assistant, the skill ingests external data such as application logs, CI/CD pipeline outputs, and configuration files. This creates an attack surface where malicious content in logs could attempt to influence the agent's behavior.
- Ingestion points: System logs and deployment metadata are processed during incident response (
references/incident-response.md) and release verification. - Boundary markers: The skill requires validation steps like
terraform planand configuration linting. - Capability inventory: Full file system access, network operations, and administrative tool execution (
kubectl,terraform,docker). - Sanitization: The 'Core Workflow' in
SKILL.mdmandates explicit user approval before any production or customer-facing deployment, providing a critical human-in-the-loop safety check.
Audit Metadata