coreweave-upgrade-migration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
kubectlcommand-line tool viaBashto manage Kubernetes deployments, including applying manifests and checking rollout status. These commands are executed locally within the cluster context provided by the user. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from a Kubernetes cluster by listing pods and reading deployment configurations, which represents an ingestion surface for potentially untrusted data.
- Ingestion points: Data is retrieved from the cluster via
k8sApi.listNamespacedPodandappsApi.readNamespacedDeploymentinSKILL.md. - Boundary markers: None present; the skill treats retrieved Kubernetes metadata as trusted data.
- Capability inventory: The skill has
Write,Edit, andBash(kubectl:*)capabilities, allowing it to modify the cluster state based on the ingested data. - Sanitization: No explicit sanitization or validation of pod labels or node selector values is performed before processing.
Audit Metadata