castai-local-dev-loop
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate instructions for setting up a development loop with CAST AI, following industry standards for DevOps workflows.
- [DATA_EXFILTRATION]: The skill communicates with the official CAST AI API at
api.cast.aito manage cluster policies and retrieve savings data. These network operations target a well-known service infrastructure. - [EXTERNAL_DOWNLOADS]: Downloads and installs the
castai-agentusing Helm from the officialcastai-helmrepository, which is a trusted source for this vendor's software. - [COMMAND_EXECUTION]: Utilizes
terraform,kubectl,helm, andjqfor cluster management and infrastructure-as-code tasks, matching the skill's stated purpose. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources, creating a potential surface for indirect prompt injection.
- Ingestion points: External API responses from
api.cast.aiare processed usingcurlandjqinSKILL.md. - Boundary markers: None present in the instructions.
- Capability inventory: The skill has access to
Bashfor executingterraform,helm, andkubectlcommands as specified inallowed-tools. - Sanitization: JSON responses from the API are sanitized and filtered using
jqbefore display or further processing.
Audit Metadata