kestra-flow-hardening
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches authoritative flow schemas from the official Kestra API at
https://api.kestra.io/v1/plugins/schemas/flow. This is a vendor-owned resource used for version-accurate validation. - [COMMAND_EXECUTION]: Employs the
curlutility to programmatically retrieve JSON schema data during the audit process. - [PROMPT_INJECTION]: The skill processes untrusted user data in the form of Kestra flow YAML files. While this represents an indirect injection surface, the skill implements a structured audit taxonomy and cross-references findings against an external schema source to mitigate risks.
- [DATA_EXFILTRATION]: Actively audits for hardcoded secrets and credentials within flow definitions, instructing the agent to recommend secure management via native secret constructs and typed inputs.
Audit Metadata