ovstorage-operator-deploy-broker
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions involve reading external documentation which serves as a potential ingestion point for untrusted data.
- Ingestion points: The skill reads the
../../docs/public/broker-operator/README.mdfile using theReadtool. - Boundary markers: No specific delimiters or instructions are provided to the agent to distinguish documentation content from its core instructions.
- Capability inventory: The skill allows the use of the
Bashtool, enabling shell command execution. - Sanitization: No sanitization or validation of the documentation content is performed before processing.
- [COMMAND_EXECUTION]: The skill requires the execution of build and deployment commands.
- Evidence: The recipe includes building the distribution with
make distand starting the daemon usingovstorage-broker --config /etc/ovstorage/broker.toml. - Context: These commands are consistent with the skill's primary purpose of deploying software and are executed within a restricted configuration environment.
Audit Metadata