nav-troubleshoot
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides structured
kubectlcommands to inspect Kubernetes resources, including pods, events, and application logs. These commands are essential for platform diagnostics. - [DATA_EXFILTRATION]: Instructions are included to inspect environment variables (e.g.,
DB_HOST,AZURE_APP_CLIENT_ID) and decode authentication tokens. While this provides access to configuration details, the operations are intended for local debugging within the user's authorized environment and do not involve exfiltration to external third-party domains. - [EXTERNAL_DOWNLOADS]: Includes commands that use
wgetto verify connectivity to official Azure Active Directory JWKS endpoints. These are well-known services used for identity management. - [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection as it processes application logs and Kubernetes events. Ingestion points:
kubectl logsandkubectl get events. Boundary markers: None. Capability inventory: Execute arbitrary shell commands viakubectland shell pipes. Sanitization: None. This is a common characteristic of troubleshooting tools that analyze external system output.
Audit Metadata