devops-maintainability-checker

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill analyzes infrastructure code in local files, creating a surface for indirect prompt injection if those files contain malicious instructions.
  • Ingestion points: The skill reads variables.tf and all *.tf files in the workspace using the Read tool and grep commands.
  • Boundary markers: No explicit delimiters or instructions are provided to the agent to distinguish between its own logic and instructions that might be embedded in the code comments or strings within the processed files.
  • Capability inventory: The skill possesses shell execution capabilities through the Bash tool, running commands like tofu, grep, and awk.
  • Sanitization: There is no evidence of sanitization or filtering of the file content before it is processed by the agent or piped into shell commands.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 12:28 AM