openchoreo-setup
Warn
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill fetches documentation and setup scripts from external sources at runtime and instructs the agent to execute them.
- The script
scripts/fetch-page.shdownloads content fromopenchoreo.devand provides it to the agent. Instructions inreferences/on-k3d-locally.mdandreferences/on-your-environment.mdtell the agent to "Walk the guide" and "follow it end to end", which involves executing commands found in the remote content. - In
references/on-k3d-multi-cluster.md, the skill performs agit cloneof theopenchoreo/openchoreorepository and instructs the agent to "read the README" and "Run all commands from the repo root", effectively executing instructions from a remote repository. - [INDIRECT_PROMPT_INJECTION]: The skill processes external documentation which may contain malicious instructions if the source is compromised.
- Ingestion points: Documentation pages fetched from
openchoreo.devviascripts/fetch-page.shand the README file from the cloned GitHub repository. - Boundary markers: Absent. The skill does not use specific delimiters or instructions to the agent to ignore or isolate potentially malicious instructions embedded within the fetched content.
- Capability inventory: The environment provides access to shell command execution, Kubernetes management tools (
kubectl,helm), local cluster management (k3d), and network tools (curl,git). - Sanitization: Absent. Fetched content is not validated, escaped, or filtered before being processed by the agent.
- [DYNAMIC_EXECUTION]: The installation logic is dynamically determined by the content of remote documents fetched at runtime rather than being statically defined within the skill's instructions.
- [COMMAND_EXECUTION]: The skill performs extensive system-level and cluster-management operations.
- Uses
kubectlandhelmfor Kubernetes resource deployment and management across multiple clusters. - Uses
k3dfor local cluster creation and management. - Uses
gitfor repository operations and version resolution. - Uses
curlfor fetching data from remote endpoints. - [EXTERNAL_DOWNLOADS]: The skill downloads resources from external domains associated with the project.
- Fetches version information from
raw.githubusercontent.com/openchoreo/openchoreo.github.io/main/versions.json. - Fetches documentation indices and pages from
openchoreo.dev.
Audit Metadata