kortix-rollback
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill describes the use of administrative tools like
ghandkubectlto perform production rollbacks. This includes triggering workflows in thekortix-ai/sunarepository and patching Argo CD application configurations on a production EKS cluster (specificallyarn:aws:eks:eu-west-2:935064898258:cluster/kortix-prod-eks). These high-privilege operations are appropriate for the skill's stated purpose of infrastructure management.- [PROMPT_INJECTION]: The skill documentation includes command templates that interpolate user-provided inputs directly into shell commands, creating a potential indirect prompt injection surface. - Ingestion points: The
versionandreasonarguments used in thegh workflow runcommand template inSKILL.md. - Boundary markers: None are present around the interpolated values.
- Capability inventory: Administrative shell access via
ghandkubectltools as documented inSKILL.md. - Sanitization: No sanitization or escaping mechanisms are specified for the user-supplied strings.
Audit Metadata