devops-maintainability-checker
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes infrastructure code in local files, creating a surface for indirect prompt injection if those files contain malicious instructions.
- Ingestion points: The skill reads
variables.tfand all*.tffiles in the workspace using theReadtool andgrepcommands. - Boundary markers: No explicit delimiters or instructions are provided to the agent to distinguish between its own logic and instructions that might be embedded in the code comments or strings within the processed files.
- Capability inventory: The skill possesses shell execution capabilities through the
Bashtool, running commands liketofu,grep, andawk. - Sanitization: There is no evidence of sanitization or filtering of the file content before it is processed by the agent or piped into shell commands.
Audit Metadata