infrahub-managing-generators
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses dynamic context injection in
SKILL.mdto execute shell commands (catandfind) during the skill loading process. These commands are used to provide the agent with immediate context regarding the local.infrahub.ymlconfiguration and the existing Python generator files within the repository. - [INDIRECT_PROMPT_INJECTION]: The skill processes external design data from Infrahub through GraphQL queries to drive infrastructure automation, creating a surface for potential indirect prompt injection.
- Ingestion points: GraphQL query results defined in
.gqlfiles (e.g.,queries/topology/pop.gql,queries/segment/segment.gql). - Boundary markers: The skill does not explicitly define delimiters for external data within the prompts, but it focuses on technical processing using the Infrahub SDK.
- Capability inventory: The skill can execute shell commands via
Bash, write and edit files, and perform network operations through the SDK client. - Sanitization: A
clean_datautility is provided inrules/patterns-common.mdto normalize GraphQL response structures, but no specific security-focused sanitization of the data content is mentioned. - [DYNAMIC_EXECUTION]: The skill facilitates the development and local execution of Python-based generators. It provides detailed instructions and examples for creating
InfrahubGeneratorsubclasses and executing them using theinfrahubctl generatorcommand against a live or test environment.
Audit Metadata