traefik
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill configures a reverse proxy (Traefik) that ingests untrusted data from the network (Host, Path, and Headers matchers) which could potentially influence agent behavior if processed without adequate sanitization.
- Ingestion points:
references/routing.mddefines matchers forHost(),Path(),Header(), andQuery()parameters. - Boundary markers: Not present in the provided YAML configuration examples.
- Capability inventory:
SKILL.mdincludes capabilities to executehelm installandkubectl applycommands. - Sanitization: No specific sanitization or filtering logic is provided for the interpolated request data in the examples.
- [CREDENTIALS_UNSAFE]:
references/kubernetes-crd.mdcontains a Kubernetes Secret example with a hardcoded passwordpassword123. While likely intended as a generic placeholder, it is a hardcoded secret in the instruction set. - [EXTERNAL_DOWNLOADS]:
SKILL.mdinstructs the agent to download Helm charts fromhttps://traefik.github.io/chartsand apply CRD definitions from Traefik's official GitHub repository (raw.githubusercontent.com/traefik/traefik). These are neutral references to the official resources of a well-known service provider.
Audit Metadata