kafka
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project source code during migration tasks from KafkaJS or node-rdkafka to Platformatic's Kafka client.\n
- Ingestion points: The agent reads existing project files to identify Kafka usage patterns as described in references/kafkajs-migration.md and references/node-rdkafka-migration.md.\n
- Boundary markers: There are no explicit instructions to the agent to disregard instructions that might be embedded in the code it is migrating.\n
- Capability inventory: The skill employs Write, Edit, and Bash tools, which could be misused if instructions in the ingested code were to be followed.\n
- Sanitization: The skill does not validate or sanitize the content of the files it reads before performing transformations.\n- [COMMAND_EXECUTION]: The skill uses shell commands to verify the environment and install necessary libraries.\n
- Evidence: Includes execution of node --version, ls, npm install, and npx for setup and dependency management.\n
- Context: These commands are used for standard developer workflows and reference official vendor packages.
Audit Metadata