skills/oracle/skills/oci/Gen Agent Trust Hub

oci

Pass

Audited by Gen Agent Trust Hub on Aug 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: Multiple shell scripts within the OKE and OCI Functions domains execute CLI commands (e.g., oci, kubectl, fn) to discover environment context and perform administrative tasks. Some diagnostic scripts also utilize elevated privileges via sudo and chroot for host-level inspection, which is consistent with the skill's purpose and guarded by mandatory user confirmation.
  • [PRIVILEGE_ESCALATION]: The skill includes administrative scripts that acquisition higher permissions to install system tools or perform deep node diagnostics. Specifically, scripts/install_missing.sh uses sudo for package management, and oke/scripts/node-doctor-run.sh uses kubectl debug to execute host-level commands via chroot /host and sudo. These are standard operational patterns for OCI infrastructure management and require explicit operator approval.
  • [EXTERNAL_DOWNLOADS]: The scripts/install_fn_linux.sh script downloads the fn CLI binary from the official fnproject repository on GitHub. This source is associated with the skill author and is considered a trusted vendor resource for OCI Functions tooling.
  • [REMOTE_CODE_EXECUTION]: The skill performs automated installation and execution of the fn CLI and OCI CLI tools. The installation process includes verification of SHA-256 digests and binary versioning to ensure code integrity before execution.
  • [DYNAMIC_EXECUTION]: Several shell scripts (e.g., common.sh, ensure_network.sh) generate and execute embedded Python snippets as heredocs to handle complex JSON/YAML parsing and CIDR calculations. This logic is restricted to local data processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 2, 2026, 07:43 PM
Security Audit — agent-trust-hub — oci