migrate-to-sizing
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute local commands using
uv run python sct.py. These commands are used for legitimate configuration management tasks, such as previewing sizing constraints (sizing preview), resolving constraints to instances (sizing resolve), and viewing the instance catalog (sizing catalog). - [INDIRECT_PROMPT_INJECTION]: The skill processes external Jenkinsfiles and YAML configuration files to extract test settings. While this represents a surface for indirect prompt injection (where malicious instructions could be embedded in the configuration files), the risk is minimized as the skill primarily uses these files for structured data extraction and passes them to a specific local tool (
sct.py). - Ingestion points: Jenkins pipeline files (
.jenkinsfile) and test-case configuration files (.yaml). - Boundary markers: None explicitly mentioned in the prompts, though the tool
sct.pylikely handles parsing. - Capability inventory: File reading and execution of the
sct.pyscript viauv. - Sanitization: The instructions rely on the
parse_jenkinsfile()function within the local tool to handle input.
Audit Metadata