oci
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Multiple shell scripts within the OKE and OCI Functions domains execute CLI commands (e.g.,
oci,kubectl,fn) to discover environment context and perform administrative tasks. Some diagnostic scripts also utilize elevated privileges viasudoandchrootfor host-level inspection, which is consistent with the skill's purpose and guarded by mandatory user confirmation. - [PRIVILEGE_ESCALATION]: The skill includes administrative scripts that acquisition higher permissions to install system tools or perform deep node diagnostics. Specifically,
scripts/install_missing.shusessudofor package management, andoke/scripts/node-doctor-run.shuseskubectl debugto execute host-level commands viachroot /hostandsudo. These are standard operational patterns for OCI infrastructure management and require explicit operator approval. - [EXTERNAL_DOWNLOADS]: The
scripts/install_fn_linux.shscript downloads thefnCLI binary from the officialfnprojectrepository on GitHub. This source is associated with the skill author and is considered a trusted vendor resource for OCI Functions tooling. - [REMOTE_CODE_EXECUTION]: The skill performs automated installation and execution of the
fnCLI and OCI CLI tools. The installation process includes verification of SHA-256 digests and binary versioning to ensure code integrity before execution. - [DYNAMIC_EXECUTION]: Several shell scripts (e.g.,
common.sh,ensure_network.sh) generate and execute embedded Python snippets as heredocs to handle complex JSON/YAML parsing and CIDR calculations. This logic is restricted to local data processing.
Audit Metadata