jenkins
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the Jenkins server, including commit messages, console logs, and test failure details. An attacker could embed malicious instructions in these fields (e.g., via a Pull Request) to influence the agent's behavior.
- Ingestion points: Untrusted content is fetched in scripts/jenkins-console.sh (consoleText), scripts/jenkins-build-status.sh (changeSets), and scripts/jenkins-test-failures.sh (testReport).
- Boundary markers: Absent. The skill does not implement delimiters or specific warnings to ignore instructions embedded in the CI output.
- Capability inventory: The agent can trigger builds (scripts/jenkins-trigger.sh), abort builds (scripts/jenkins-abort.sh), and perform arbitrary API operations (scripts/jenkins-api.sh).
- Sanitization: Data is processed via jq and grep without validation or sanitization against prompt injection patterns.
- [COMMAND_EXECUTION]: The scripts/jenkins-api.sh tool provides raw access to the Jenkins REST API, allowing the agent to perform any action authorized by the user's API token. While the script itself is not vulnerable to shell injection, providing the agent with an unconstrained API interface increases the risk of unauthorized actions if the agent is successfully targeted by indirect prompt injection.
Audit Metadata