castai-core-workflow-b
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
helm,curl, andkubectlto perform administrative tasks within a Kubernetes environment and interact with the CAST AI cloud service. These commands are necessary for managing cluster resources and autoscaling policies. - [EXTERNAL_DOWNLOADS]: Fetches and installs the Workload Autoscaler components from the official CAST AI Helm repository. As CAST AI is a well-known service, these downloads are considered safe within the intended use-case.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process data from external sources, including API responses and Kubernetes events, to generate cost-saving recommendations and monitoring evidence. While this creates an attack surface for indirect prompt injection, it is considered low risk given the service type.
- Ingestion points: API responses from
api.cast.aiand event logs retrieved viakubectl(referenced inSKILL.md). - Boundary markers: None identified in the prompt instructions to delimit or instruct the agent to ignore potentially malicious embedded content in external data.
- Capability inventory: The skill possesses file writing/editing capabilities and bash command execution (
helm,kubectl,curl). - Sanitization: No explicit sanitization, validation, or filtering of the ingested external data is specified before the agent processes it to perform actions or generate output.
Audit Metadata