qe-test-environment-management
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The
docker-compose.test.ymlsnippet contains hardcoded default credentials (password) for the PostgreSQL database service. While these are presented as placeholders for a local test environment, hardcoding credentials in configuration files is a practice that can lead to security risks if applied to production-like or shared environments. - [INDIRECT_PROMPT_INJECTION]: The skill describes an architecture where the agent ingests external reports and configurations, creating a surface for indirect prompt injection.
- Ingestion points: The
Agent Coordination Hintssection specifies that the agent reads files fromparity-checks/*andcost-reports/*to manage environments. - Boundary markers: There are no instructions or delimiters provided to help the agent distinguish between data and potential commands within these ingested files.
- Capability inventory: The skill provides functional code for executing shell commands including
aws ec2,docker-compose, andnpm test. - Sanitization: No validation or sanitization mechanisms are described for the content of the reports or configuration files before they are processed by the agent.
Audit Metadata