cohere-prod-checklist
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill establishes a surface area for indirect prompt injection as it requires the agent to ingest and analyze output from external network requests and system deployment statuses.
- Ingestion points: External data enters the agent's context through
curlhealth check responses from staging/production endpoints andkubectlrollout/status logs as described inSKILL.md. - Boundary markers: The instructions do not define specific delimiters or instructions to ignore potential commands embedded within the external data.
- Capability inventory: The skill uses
kubectl(for management and rollback) andcurl(for network probing) as defined in theallowed-toolssection and used inSKILL.md. - Sanitization: No specific mechanisms for filtering or validating the structure of external responses are described before the agent processes the information.
- [COMMAND_EXECUTION]: The skill uses
kubectlto perform deployment operations such as applying configurations, monitoring rollout status, and executing rollbacks. It also utilizescurlfor connectivity and health verification. These commands are used legitimately for the skill's stated purpose. - [EXTERNAL_DOWNLOADS]: The skill references and fetches status information from
status.cohere.com. This reference targets the official status page of a well-known AI service provider and is consistent with standard production monitoring practices.
Audit Metadata