castai-debug-bundle
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Uses
kubectl,helm, andtarto inspect cluster resources and package diagnostic data. These tools are used as intended for gathering system state and are explicitly listed in the allowed-tools configuration. - [DATA_EXFILTRATION]: Collects diagnostic data into a local archive for manual submission to support. The skill accesses the CAST AI API via
curlto retrieve cluster status, which is a well-known service for this tool's context and is handled using a local environment variable. - [PROMPT_INJECTION]: The skill processes untrusted data from cluster logs and events. 1. Ingestion points:
kubectl logsandkubectl get eventsin SKILL.md. 2. Boundary markers: None; collected data is stored in plain text files within an archive. 3. Capability inventory:kubectl,curl,helm, andtar. 4. Sanitization: Employsjqto filter API responses for non-sensitive fields and includes explicit instructions for user-led manual redaction of sensitive information before sharing.
Audit Metadata