konnect-gateway-triage
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill implements operational guardrails that enhance the safety and accuracy of gateway triage.
- Artifact Validation: The instructions explicitly require the agent to treat repository configuration as "intended state" rather than "proof of deployed behavior," preventing blind trust in static artifacts that may not reflect live reality.
- Scope Containment: The skill defines clear boundaries for its operations, instructing the agent to hand off tasks to specialized declarative or observability skills once a failure domain is identified, which prevents capability creep.
- Vendor Alignment: All tools referenced (e.g.,
kongctl,decK,terraform-konnect) and infrastructure patterns align with the official vendor's ecosystem (Kong/Konnect), representing standard diagnostic functionality. - Indirect Prompt Injection Surface: While the skill processes external data (live Gateway configurations and repository files), this is fundamental to its triage purpose. The risk is mitigated by analytical requirements that verify findings across multiple independent artifacts (e.g., comparing live control-plane state against environment-side signals).
Audit Metadata