openchoreo-platform-engineer-gitops
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill fetches documentation and resource templates from remote vendor-controlled locations, creating an attack surface where malicious content at the source could influence the agent's actions during manifestation or documentation rendering.\n
- Ingestion points: Scripts
scripts/fetch-page.shandscripts/extract-resources.shretrieve content fromopenchoreo.devand GitHub repositories.\n - Capability inventory: The skill utilizes
bash,kubectl,occ, andgitto manage infrastructure and source code.\n - Sanitization: Manifests are processed via
awkandyqto filter specific resource components, but the template content remains largely untrusted until applied.\n - Boundary markers: The instructions do not define explicit delimiters to isolate remote content from system prompts.\n- [EXTERNAL_DOWNLOADS]: The skill is configured to download necessary resources from external domains during the setup process.\n
- Fetches documentation from
https://openchoreo.dev.\n - Retrieves sample resource manifests from the
openchoreo/openchoreoandopenchoreo/sample-gitopsGitHub organizations.\n - Points to
https://fluxcd.io/install.shfor the Flux CD command-line tool installation.\n- [COMMAND_EXECUTION]: The skill performs its operations by executing a variety of shell-based commands to manage cluster and repository state.\n - Executes
kubectlandoccfor Kubernetes cluster resource management.\n - Uses
gitandghfor managing Git repositories and creating pull requests.\n - Runs
curlto fetch the external resources described in the downloads section.
Audit Metadata