apollo-incident-runbook
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements standard DevOps and incident response practices for the Apollo.io platform, utilizing industry-standard tools for service monitoring and recovery.
- [EXTERNAL_DOWNLOADS]: The skill uses curl to fetch status information from official Apollo domains (status.apollo.io, api.apollo.io). These are well-known services directly related to the skill's primary purpose and do not represent a security risk.
- [COMMAND_EXECUTION]: The runbook includes shell commands for infrastructure management via kubectl (e.g., scaling deployments, updating environment variables). These commands are standard for incident mitigation and are explicitly scoped within the skill's configuration.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources such as API responses and container logs. While this presents a potential attack surface, the risk is minimal given the controlled environment of incident response and the lack of automated execution based on unvalidated data.
Audit Metadata