rhdh-smoke-tests
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches a maintenance script
install-rhdh-catalog-source.shfrom the author's official GitHub repository (github.com/redhat-developer) during the operator smoke test workflow. - [REMOTE_CODE_EXECUTION]: Executes the downloaded
install-rhdh-catalog-source.shscript to configure the RHDH catalog source. This operation is an intended part of the deployment testing process and originates from a verified vendor source. - [COMMAND_EXECUTION]: Orchestrates the use of standard DevOps tools including
oc,helm,skopeo,podman, andjqvia shell commands and Python scripts to manage the cluster environment and verify software health. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the tested environment, creating a surface for indirect prompt injection.
- Ingestion points: Reads pod status logs and parses responses from the Red Hat Developer Hub API in
scripts/verify_ns.py. - Boundary markers: Absent; the instructions do not explicitly tell the model to ignore potential instructions embedded in logs or API payloads.
- Capability inventory: High privilege capabilities are present, including full cluster administration via
ocandhelm. - Sanitization: Employs standard JSON parsing for API responses and uses
shlex.quoteinscripts/operator_upgrade.pyto prevent shell injection during command construction.
Audit Metadata