sealos-s3
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
sealos-clitool and a local Node.js scriptanalyze-project-s3.mjsto perform storage operations and analyze project requirements. - [EXTERNAL_DOWNLOADS]: The skill recommends using
npx -y sealos-cli@latestto execute the Sealos CLI, which fetches the package from the official npm registry. - [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection because the
analyze-project-s3.mjsscript identifies local files that the agent then reads to determine configuration needs. These files could contain instructions meant to divert the agent's behavior. - Ingestion points: Local project files are scanned and the agent is instructed to read them.
- Boundary markers: The instructions do not provide explicit delimiters or warnings to ignore instructions found within the project files.
- Capability inventory: The agent can execute
sealos-clicommands and write to environment files. - Sanitization: No sanitization is applied to the content of the files read during the analysis process.
Audit Metadata