dstack-beads-adopt-feature
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes a local binary (
dstack) located at a relative path{baseDir}/../../bin/dstackto perform inspection, planning, and application of feature adoptions. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data that could contain malicious instructions.
- Ingestion points: Data is ingested through the
<legacy-feature>command-line argument and theCLASSIFICATION.jsonfile specified in the instructions (SKILL.md). - Boundary markers: No specific delimiters or instructions are present to prevent the agent from interpreting content within the JSON file as new instructions.
- Capability inventory: The skill has the capability to execute shell commands and modify the system state via the
dstackutility. - Sanitization: No sanitization or validation of the input arguments or the JSON file content is described in the skill instructions prior to their use in shell commands.
Audit Metadata