kafka-shadowtraffic
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses attached Model Context Protocol (MCP) servers (e.g., Lenses, Confluent) to discover Kafka cluster metadata. This is a standard and safe use of the MCP ecosystem for infrastructure automation.
- [SAFE]: A mandatory hard-gate (Step 2) ensures the user reviews and confirms all discovered metadata before any files are written to the local system.
- [SAFE]: The skill generates a standard Docker command for the user to run the tool. It correctly identifies the need for a license and provides a template (
license.env.example) without including sensitive information. - [SAFE]: External references target official ShadowTraffic and Kafka documentation or container images, which are well-known and trusted technology services.
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to run the ShadowTraffic linter via Docker (docker run --action lint). This is a legitimate utility for validating the generated configuration and is executed using standard CLI patterns.
Audit Metadata