infra-engineer

Fail

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill documentation includes commands to fetch and execute the official Azure CLI installation script from Microsoft's shortcut domain.
  • Evidence: curl -L https://aka.ms/InstallAzureCli | bash in SKILL.md.
  • [EXTERNAL_DOWNLOADS]: Fetches official installers and CLI tools from trusted cloud providers infrastructure, including Amazon's AWS CLI and Google's Cloud SDK.
  • Evidence:
  • curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip" in SKILL.md and references/aws-overview.md.
  • curl -O https://dl.google.com/dl/cloudsdk/channels/rapid/downloads/google-cloud-cli-linux-x86_64.tar.gz in references/gcloud-platform.md.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides documentation and patterns for building web scrapers and crawlers that ingest untrusted content from external URLs.
  • Ingestion points: references/browser-rendering.md and references/cloudflare-workers-advanced.md describe Cloudflare Workers that receive external URLs and scrape their content using Puppeteer.
  • Boundary markers: Minimal code examples do not implement specific delimiters or 'ignore' instructions for the extracted content, though the accompanying text notes these risks.
  • Capability inventory: The skill includes deployment automation via scripts/cloudflare_deploy.py to operationalize these Workers.
  • Sanitization: Documentation explicitly identifies sanitization of extracted content as a best practice for production environments.
  • [COMMAND_EXECUTION]: Provided automation scripts (scripts/cloudflare_deploy.py and scripts/docker_optimize.py) use subprocess calls to orchestrate system tools and CLI utilities.
  • Evidence: subprocess.run() calls in scripts/cloudflare_deploy.py are used to execute wrangler deployment commands.
  • [PRIVILEGE_ESCALATION]: Documentation includes instructions for installing official cloud tooling using sudo for system-level integration.
  • Evidence: sudo ./aws/install in references/aws-overview.md and sudo apt-get install google-cloud-cli in references/gcloud-platform.md.
Recommendations
  • HIGH: Downloads and executes remote code from: https://aka.ms/InstallAzureCli - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 23, 2026, 05:06 PM
Security Audit — agent-trust-hub — infra-engineer