migrate-kestra-2
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONOBFUSCATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads an installation script for the
kestra-migratetool from the vendor's official GitHub repository (https://raw.githubusercontent.com/kestra-io/kestra2-flow-migration/main/install-scripts/install.sh). This is a legitimate vendor resource.\n- [REMOTE_CODE_EXECUTION]: The skill provides instructions to execute the downloaded installation script directly via a shell (curl | bash). While this is a common pattern for CLI tool installation, it constitutes remote code execution. The source is the vendor's verified GitHub organization.\n- [COMMAND_EXECUTION]: The skill makes extensive use of CLI tools includingkestra-migrate,kestractl, andkestrato perform instance audits, flow migrations, and server upgrades. These operations are core to the skill's functionality.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external Kestra flow YAML files, presenting a surface for indirect prompt injection.\n - Ingestion points: Flows are read from local directories or exported from Kestra instances (documented in
references/audit.mdandreferences/cli-reference.md).\n - Boundary markers: There are no explicit delimiters or instructions to the agent to ignore potentially malicious embedded content within the flow YAML files.\n
- Capability inventory: The skill can execute shell commands, perform network operations (API calls), and write files to the local file system.\n
- Sanitization: The skill does not describe any specific sanitization or validation of the flow content before processing.\n- [OBFUSCATION]: A hex escape sequence (
\x1b) is used in a regular expression withinreferences/cli-reference.mdto strip ANSI color codes from CLI output. This is a standard and benign use of hex encoding for character matching.
Audit Metadata