k8s-troubleshoot
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The bundled shell script
scripts/health-check.shaccepts cluster context and namespace as command-line arguments and interpolates them directly intokubectlcommand strings without escaping. This creates a potential surface for command injection if malicious inputs are provided. * Ingestion points: Command-line arguments $1 and $2 inscripts/health-check.sh. * Boundary markers: None. * Capability inventory:kubectlcommand execution. * Sanitization: None present in the script code.
Audit Metadata