agency-incident-response-commander
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes detailed templates for executing infrastructure management commands via
kubectl, such as rollbacks, scaling, and service restarts. These are core to the skill's purpose as an incident commander but represent high-privilege operations.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process potentially untrusted data from incident reports, logs, and monitoring systems, which could be used to influence the agent's actions if malicious instructions are embedded within that data.\n - Ingestion points: User-provided incident descriptions, log outputs, and alert summaries processed through the templates in
SKILL.md.\n - Boundary markers: Absent; the skill does not define specific delimiters or instructions to ignore embedded commands within the incident data.\n
- Capability inventory: Execution of shell commands (
kubectl) for cluster management and deployment manipulation.\n - Sanitization: Absent; there are no instructions to sanitize or validate external data before it is used to populate diagnostic or remediation steps.
Audit Metadata