configuring-load-balancers
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/generate_config.pyimplements functionality to create shell scripts and programmatically set executable permissions. This occurs in thegenerate_scriptmethod, which writes template content to a file and applieschmod 0o755to enable execution. While intended for automation, this allows for the creation of executable files from dynamic input.- [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection because it transforms user-provided configurations into executable scripts without sufficient sanitization. - Ingestion points: Load balancer parameters and template content provided via the CLI arguments in
scripts/generate_config.py(e.g.,--content). - Boundary markers: No explicit delimiters or instructions are used to separate user data from the generated script logic.
- Capability inventory: The skill can perform file system operations and modify file permissions via the
Generatorclass inscripts/generate_config.py. - Sanitization: The implementation uses direct string concatenation to build shell scripts, providing no protection against command injection within the generated templates.
Audit Metadata