engineering-devops-automator
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes several utility scripts (scripts/analyze_deployment_risk.py, scripts/validate_dockerfile.sh, scripts/check_services.sh) that perform local environment analysis and health checks. These are used to provide the agent with insights into the repository's infrastructure and deployment state.
- [DATA_EXFILTRATION]: The scripts/check_services.sh script enables the agent to perform TCP connectivity probes to arbitrary host:port pairs. While designed for verifying service availability, this provides a mechanism for network scanning or probing internal/external endpoints.
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes repository metadata and documentation to summarize deployment risks. 1. Ingestion points: Repository file structure and README.md (scripts/analyze_deployment_risk.py). 2. Boundary markers: Absent. 3. Capability inventory: Local file read, TCP network probes (scripts/check_services.sh). 4. Sanitization: Script performs structural analysis and regex-based input validation.
Audit Metadata