osmo-deploy
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill is designed to download the OSMO CLI and related deployment scripts from official GitHub repositories if they are missing from the environment.
- [REMOTE_CODE_EXECUTION]: The deployment process involves fetching and executing a bootstrap installer ('install.sh') from a remote GitHub repository to set up the OSMO CLI tool.
- [COMMAND_EXECUTION]: The skill performs extensive command execution using 'terraform', 'helm', 'kubectl', and cloud CLIs ('az', 'aws') to provision resources and manage cluster state. It also runs local shell scripts for orchestration and health checks.
- [PRIVILEGE_ESCALATION]: Setup for the 'microk8s' provider involves the use of 'sudo' to manage system-level snap packages and cluster configurations on Ubuntu hosts.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided inputs that are interpolated into shell commands and infrastructure variables.
- Ingestion points: User-supplied values for GPU counts, VM SKUs, regions, and subscription details (SKILL.md).
- Boundary markers: The skill utilizes environment variables and non-interactive flags to structure command execution.
- Capability inventory: High-privilege execution environment including shell script orchestration, Terraform, Helm, and cloud management tools.
- Sanitization: The instructions include a translation layer to map informal user inputs to canonical SKUs, serving as an implicit validation mechanism.
Audit Metadata