opendeploy-alarms
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from service logs and alarm history which could potentially contain malicious instructions.
- Ingestion points: Data entering through
opendeploy services logsandopendeploy monitoring alarms historycommands. - Boundary markers: Uses
AskUserQuestionto confirm actions with the user before executing mutations or engaging support. - Capability inventory: Access to
Bashfor CLI operations andAskUserQuestionfor user interaction. - Sanitization: Instructions explicitly mandate that the agent 'never print secrets' and 'redact' evidence packets before any transmission.
- [COMMAND_EXECUTION]: Executes the
opendeployCLI andnpmfor version management and alarm lifecycle operations. These tools are associated with the vendor resource patterns for the skill author 'opendeploy-dev'. - [DATA_EXPOSURE_AND_EXFILTRATION]: Transmits redacted evidence packets to OpenDeploy support channels. This is a primary feature for incident resolution and includes strict human-in-the-loop requirements for consent and evidence review.
Audit Metadata