mcloud-deployments
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes output from external command executions, creating a surface for untrusted data to enter the agent context.
- Ingestion points: Data from
mcloud deployments list,get, andbuild-logsas described inSKILL.md. - Boundary markers: The prompt suggests using JSON and jq for structured data but lacks specific delimiters or 'ignore' instructions for the data content.
- Capability inventory: The agent uses Bash tools for
mcloudandjqoperations. - Sanitization: No sanitization or validation logic is specified for the ingested command output.
- [COMMAND_EXECUTION]: The skill leverages specific CLI tools (
mcloudandjq) to perform its tasks. These tools are scoped within the skill's defined context for deployment management.
Audit Metadata