redis
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes instructions for managing the Redis service via
systemctl, adjusting kernel parameters withsysctl, and performing database operations throughredis-cli. These are legitimate administrative functions required for the skill's primary purpose. - [EXTERNAL_DOWNLOADS]: References provided in
docs.mdpoint to official Redis documentation (redis.io) and well-known community repositories on GitHub. These are considered trusted and safe sources. - [PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection due to its ability to read data from an external Redis store.
- Ingestion points: Data retrieval commands such as
GET,HGETALL,SCAN, andBRPOPare listed inSKILL.mdandreferences/common-patterns.md. - Boundary markers: The documentation does not specify the use of delimiters or 'ignore' instructions when processing data retrieved from Redis.
- Capability inventory: The skill permits package installation, service restarts, and kernel-level configuration changes across various files.
- Sanitization: No explicit logic for sanitizing or validating external data before it enters the agent's context is mentioned.
Audit Metadata