skills/redhat-developer/rhdh-skills/rhdh-plugin-catalog-index-status-and-update-flow/Gen Agent Trust Hub
rhdh-plugin-catalog-index-status-and-update-flow
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various CLI tools including
git,oc(OpenShift CLI), andskopeothrough thesubprocessmodule. These commands are used to manage local worktrees, query cluster status, and inspect container images. The implementation uses list-based arguments which avoids shell injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The skill fetches package information and plugin status updates from the author's official GitHub repositories. These requests target legitimate vendor resources and are used for configuration and status tracking.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources, specifically the Plugin-Catalog-Status wiki pages and local status documentation. 1. Ingestion points:
docs/catalog-status.mdand GitHub Wiki pages. 2. Boundary markers: No explicit delimiters are used in the prompt instructions, although the data is parsed into a structured JSON format before being processed. 3. Capability inventory: The skill possesses capabilities to execute shell scripts, rungitcommands, and perform cluster operations. 4. Sanitization: Input data is validated using regular expressions for versions and workspace names, and file paths are resolved relative to the local repository root, limiting the impact of potentially malicious content in the status tables.
Audit Metadata