setup-linux-host-backend
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill proactively addresses indirect prompt injection risks by providing a defensive mechanism for handling untrusted data from CLI outputs.\n
- Ingestion points: Commands that read data from the Observe tenant, such as
observe content host viewandobserve datastream listinSKILL.md.\n - Boundary markers: The skill requires a
wraphelper function that uses random nonces to encapsulate data within<untrusted-data>tags, preventing the agent from misinterpreting data as instructions.\n - Sanitization: The implementation uses
sedandtrto strip ANSI escape sequences and non-printable control characters, neutralizing terminal-based UI redressing or injection attempts.\n- [CREDENTIALS_UNSAFE]: The skill manages Observe ingest tokens with high security awareness.\n - Evidence: The workflow for creating ingest tokens in
SKILL.mdPhase 3d is designed to prevent the secret from entering the AI agent's context. The token is exported directly to the user's shell environment (OBSERVE_TOKEN), and the agent is explicitly instructed to strip secrets from its own view and never request the raw value from the user.\n- [COMMAND_EXECUTION]: The skill uses theobserveCLI and standard shell utilities (jq,openssl,sed,tr) to configure backend resources. These operations are performed transparently and are consistent with the skill's administrative purpose.
Audit Metadata