vault-secrets-integrator
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requests unrestricted shell access ('Bash(cmd:*)'), which is a high-privilege capability. While typical for infrastructure automation, it increases the impact of any potential compromise.- [INDIRECT_PROMPT_INJECTION]: As a DevOps tool processing secrets and configuration code, this skill possesses an attack surface where malicious instructions embedded in processed files (like Terraform or Kubernetes manifests) could attempt to exploit the agent's tool access.
Audit Metadata