cert-manager-setup
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill operates in an environment with high-privilege capabilities such as
Bash(cmd:*)and file system access. It processes user requests for infrastructure setup without explicit instructions for input sanitization or boundary markers between instructions and potentially untrusted data. - Ingestion points: Processes user-provided requests related to "cert manager setup" and infrastructure patterns (SKILL.md).
- Boundary markers: Absent. There are no instructions defining delimiters to prevent the agent from mistaking data for new instructions.
- Capability inventory: The skill is granted access to
Read,Write,Edit,Bash(cmd:*), andGrep(SKILL.md frontmatter). - Sanitization: The instructions do not specify procedures for validating or escaping parameters before they are used in generated configurations or shell commands.
Audit Metadata