kafka-stream-processor
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user requests and configurations related to Kafka stream processors. Because it possesses high-privilege tools, it is susceptible to indirect prompt injection where malicious instructions could be embedded in the data being processed.
- Ingestion points: Processes user-supplied requests, Kafka patterns, and data transformation logic (SKILL.md).
- Boundary markers: The instructions do not specify the use of delimiters or warnings for the agent to ignore instructions embedded within the data it processes.
- Capability inventory: The skill metadata allows access to
Read,Write,Edit,Grep, and unrestrictedBashcommands (SKILL.md frontmatter). - Sanitization: There are no instructions for the agent to validate, escape, or sanitize input before performing file operations or executing shell commands.
Audit Metadata