openchoreo-setup

Warn

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: MEDIUMREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill fetches documentation and setup scripts from external sources at runtime and instructs the agent to execute them.
  • The script scripts/fetch-page.sh downloads content from openchoreo.dev and provides it to the agent. Instructions in references/on-k3d-locally.md and references/on-your-environment.md tell the agent to "Walk the guide" and "follow it end to end", which involves executing commands found in the remote content.
  • In references/on-k3d-multi-cluster.md, the skill performs a git clone of the openchoreo/openchoreo repository and instructs the agent to "read the README" and "Run all commands from the repo root", effectively executing instructions from a remote repository.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external documentation which may contain malicious instructions if the source is compromised.
  • Ingestion points: Documentation pages fetched from openchoreo.dev via scripts/fetch-page.sh and the README file from the cloned GitHub repository.
  • Boundary markers: Absent. The skill does not use specific delimiters or instructions to the agent to ignore or isolate potentially malicious instructions embedded within the fetched content.
  • Capability inventory: The environment provides access to shell command execution, Kubernetes management tools (kubectl, helm), local cluster management (k3d), and network tools (curl, git).
  • Sanitization: Absent. Fetched content is not validated, escaped, or filtered before being processed by the agent.
  • [DYNAMIC_EXECUTION]: The installation logic is dynamically determined by the content of remote documents fetched at runtime rather than being statically defined within the skill's instructions.
  • [COMMAND_EXECUTION]: The skill performs extensive system-level and cluster-management operations.
  • Uses kubectl and helm for Kubernetes resource deployment and management across multiple clusters.
  • Uses k3d for local cluster creation and management.
  • Uses git for repository operations and version resolution.
  • Uses curl for fetching data from remote endpoints.
  • [EXTERNAL_DOWNLOADS]: The skill downloads resources from external domains associated with the project.
  • Fetches version information from raw.githubusercontent.com/openchoreo/openchoreo.github.io/main/versions.json.
  • Fetches documentation indices and pages from openchoreo.dev.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 18, 2026, 10:26 AM
Security Audit — agent-trust-hub — openchoreo-setup