devops-engineer
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No malicious injection patterns or safety bypass attempts were detected. The skill includes robust 'MUST NOT' constraints that prevent unauthorized production deployments and unsafe secret handling.
- [COMMAND_EXECUTION]: The skill provides numerous templates for shell-based automation (kubectl, terraform, docker). These operations are standard for DevOps tasks and include built-in verification and rollback procedures.
- [EXTERNAL_DOWNLOADS]: The templates reference standard software installation patterns (npm, pip) and official security scanning tools (Trivy, Syft, Cosign). All external references target well-known, trusted registries or official repositories.
- [CREDENTIALS_UNSAFE]: The skill emphasizes the use of secret managers over hardcoded values. While templates contain placeholder credentials (e.g., 'user:pass') for illustrative purposes, the core instructions strictly forbid storing real secrets in code or environment variables.
Audit Metadata