skills/redpanda-data/skills/streaming/Gen Agent Trust Hub

streaming

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: No patterns of prompt injection, role-play overrides, or attempts to bypass safety filters were found. The skill provides purely technical instructions for using Redpanda.\n- [CREDENTIALS_UNSAFE]: No hardcoded secrets or sensitive credentials were detected. All examples use generic placeholders such as 'myuser', 'mypassword', and 'sasl-password', or reference secret management variables.\n- [DATA_EXFILTRATION]: No mechanisms for exfiltrating sensitive data were found. The skill focuses on standard Kafka-protocol data streaming between authenticated clients and brokers.\n- [OBFUSCATION]: The content is presented in clear plain text. No evidence of Base64-encoded commands, zero-width characters, homoglyphs, or other obfuscation techniques was detected.\n- [EXTERNAL_DOWNLOADS]: The skill mentions official and widely-used Kafka client libraries from trusted sources like Apache, Confluent, and the Redpanda ecosystem. No risky or unverifiable remote downloads were identified.\n- [REMOTE_CODE_EXECUTION]: No remote code execution patterns, such as piping external scripts directly to a shell, were found.\n- [PRIVILEGE_ESCALATION]: No attempts to acquire elevated system privileges (e.g., sudo) were found. The administrative commands described are for the Redpanda application itself.\n- [PERSISTENCE]: No persistence mechanisms, such as modification of shell profiles or service managers, were detected.\n- [METADATA_POISONING]: The skill metadata is accurate and consistent with the provided documentation.\n- [INDIRECT_PROMPT_INJECTION]: The skill provides tools for streaming data but does not perform automated, unsafe processing of that data that would lead to injection vulnerabilities.\n- [TIME_DELAYED_CONDITIONAL]: No time-gated or environment-conditional triggers for malicious behavior were found.\n- [DYNAMIC_EXECUTION]: No usage of dynamic code evaluation or runtime compilation was detected.\n- [DYNAMIC_CONTEXT_INJECTION]: The skill does not contain any dynamic context injection placeholders (!command).
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 04:34 PM