ovstorage-operator-deploy-broker

Pass

Audited by Gen Agent Trust Hub on Sep 1, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill instructions involve reading external documentation which serves as a potential ingestion point for untrusted data.
  • Ingestion points: The skill reads the ../../docs/public/broker-operator/README.md file using the Read tool.
  • Boundary markers: No specific delimiters or instructions are provided to the agent to distinguish documentation content from its core instructions.
  • Capability inventory: The skill allows the use of the Bash tool, enabling shell command execution.
  • Sanitization: No sanitization or validation of the documentation content is performed before processing.
  • [COMMAND_EXECUTION]: The skill requires the execution of build and deployment commands.
  • Evidence: The recipe includes building the distribution with make dist and starting the daemon using ovstorage-broker --config /etc/ovstorage/broker.toml.
  • Context: These commands are consistent with the skill's primary purpose of deploying software and are executed within a restricted configuration environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 1, 2026, 02:49 PM
Security Audit — agent-trust-hub — ovstorage-operator-deploy-broker