infra-engineer
Fail
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill documentation includes commands to fetch and execute the official Azure CLI installation script from Microsoft's shortcut domain.
- Evidence:
curl -L https://aka.ms/InstallAzureCli | bashinSKILL.md. - [EXTERNAL_DOWNLOADS]: Fetches official installers and CLI tools from trusted cloud providers infrastructure, including Amazon's AWS CLI and Google's Cloud SDK.
- Evidence:
curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"inSKILL.mdandreferences/aws-overview.md.curl -O https://dl.google.com/dl/cloudsdk/channels/rapid/downloads/google-cloud-cli-linux-x86_64.tar.gzinreferences/gcloud-platform.md.- [INDIRECT_PROMPT_INJECTION]: The skill provides documentation and patterns for building web scrapers and crawlers that ingest untrusted content from external URLs.
- Ingestion points:
references/browser-rendering.mdandreferences/cloudflare-workers-advanced.mddescribe Cloudflare Workers that receive external URLs and scrape their content using Puppeteer. - Boundary markers: Minimal code examples do not implement specific delimiters or 'ignore' instructions for the extracted content, though the accompanying text notes these risks.
- Capability inventory: The skill includes deployment automation via
scripts/cloudflare_deploy.pyto operationalize these Workers. - Sanitization: Documentation explicitly identifies sanitization of extracted content as a best practice for production environments.
- [COMMAND_EXECUTION]: Provided automation scripts (
scripts/cloudflare_deploy.pyandscripts/docker_optimize.py) use subprocess calls to orchestrate system tools and CLI utilities. - Evidence:
subprocess.run()calls inscripts/cloudflare_deploy.pyare used to executewranglerdeployment commands. - [PRIVILEGE_ESCALATION]: Documentation includes instructions for installing official cloud tooling using
sudofor system-level integration. - Evidence:
sudo ./aws/installinreferences/aws-overview.mdandsudo apt-get install google-cloud-cliinreferences/gcloud-platform.md.
Recommendations
- HIGH: Downloads and executes remote code from: https://aka.ms/InstallAzureCli - DO NOT USE without thorough review
Audit Metadata