endpoint-ops
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill incorporates robust safety patterns, specifically the 'read-update-read' verification cycle, which ensures that environment changes are localized, verified, and do not unintentionally overwrite existing configurations.
- [INDIRECT_PROMPT_INJECTION]: The skill has an ingestion surface for untrusted data via worker logs fetched by the 'stream-worker-logs' tool. This risk is mitigated by the skill's explicit instructions to keep the diagnostic phase read-only and to present recommendations to the user for authorization before executing any mutations, preventing the automated execution of potentially malicious instructions embedded in the logs.
Audit Metadata