coreweave-incident-runbook
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill reads data from the Kubernetes environment which could contain untrusted content such as log messages or event descriptions.
- Ingestion points: The skill ingests data through
kubectl get pods,kubectl get events, andkubectl execoutputs. - Boundary markers: No specific boundary markers or instructions are provided to the agent to treat tool output as untrusted data.
- Capability inventory: The skill uses the Bash tool to run
kubectlcommands for triage and deployment rollbacks. - Sanitization: The instructions include manual steps for users to redact evidence, but no automated sanitization is applied to the data processed by the agent.
- [COMMAND_EXECUTION]: The instructions utilize
kubectlto interact with the cluster, including executing commands within pods (nvidia-smi) and performing deployment rollbacks. - [EXTERNAL_DOWNLOADS]: The skill provides a link to the official CoreWeave status page for monitoring service health.
Audit Metadata