debugging-signals-pipeline
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONCREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Automated scanners flagged the use of curl piped to python3 as a potential RCE vulnerability. Analysis confirms these commands target a local Temporal REST API (localhost:8081) and use static Python scripts provided in the skill body for JSON parsing, which is safe for local debugging.
- [COMMAND_EXECUTION]: The skill provides various commands for interacting with the local environment, including executing commands within Docker containers (docker exec) and performing administrative actions on a local ClickHouse database. These are standard operations for the intended troubleshooting use case.
- [CREDENTIALS_UNSAFE]: The documentation references the management of sensitive configuration via environment variables and .env files. No hardcoded credentials, API keys, or secrets are present within the skill content.
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it processes external signal data. Ingestion points: Data enters the system via 'ingest_signals_json' and 'emit_signals_from_fixture' commands. Boundary markers: None are specified for the processed data. Capability inventory: The agent can execute Docker commands and perform database deletions. Sanitization: No explicit sanitization or validation of the ingested signal content is documented. This is assessed as a low risk given the local diagnostic context.
Audit Metadata