genkit-infra-expert
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill uses a shell script
scripts/init-terraform.shto dynamically generate Terraform configuration files (terraform/main.tf) based on user-supplied project and region arguments. - [COMMAND_EXECUTION]: The skill is configured with access to
Bash(terraform:*)andBash(gcloud:*)tools to perform deployment, validation, and infrastructure provisioning tasks as described in the documentation and examples. - [INDIRECT_PROMPT_INJECTION]: The skill processes Genkit application configurations to generate infrastructure modules, creating a surface where malicious instructions in the application code could influence the agent's actions during the infrastructure setup.
- Ingestion points: The skill reads Genkit application layouts and Terraform structures using
Read,Glob, andGreptools. - Boundary markers: No specific delimiters or instructions to ignore embedded content were identified in the prompt logic.
- Capability inventory: The skill has extensive file-writing capabilities and execution rights for infrastructure management CLI tools.
- Sanitization: No explicit sanitization or validation logic for the input configuration data is implemented before it is used in the module generation process.
Audit Metadata