orca-asset-profile
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it ingests asset metadata and log data. Ingestion points: asset names, tags, and log events from get_asset_by_id and search_cdr_events. Boundary markers: Absent. Capability inventory: Cloud data retrieval and remediation script generation. Sanitization: Absent.
- [COMMAND_EXECUTION]: The skill generates remediation scripts in several formats (e.g., Terraform, Ansible, Shell) based on the asset profile findings.
Audit Metadata