devops-best-practices
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a Python script (scripts/k8s-parity.py) and instructions that utilize external CLI tools like kubectl, helm, docker, and process-compose. These tools are used for their intended purpose of verifying deployment parity and managing local development environments. The Python script uses subprocess.run with list-based arguments, which is a secure way to execute commands without invoking a shell.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze local project files (e.g., manifests, configuration files, and documentation) to generate dev environment setups or validate existing deployments. The process includes a mandatory step to present a plan to the user for approval before writing any files, which serves as a human-in-the-loop safety boundary. The capabilities are limited to DevOps-related automation.
Audit Metadata