flux-topology
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or dangerous command executions were detected. The skill describes standard developer tooling for GitOps environment analysis.- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes YAML files from the user's repository, creating an attack surface for indirect prompt injection if those files contain malicious instructions. However, the documented capabilities are restricted to read-only analysis.
- Ingestion points: YAML files located in the 'flux/' directory (SKILL.md).
- Boundary markers: Not specified in the instructions.
- Capability inventory: Topology mapping, application card inspection, dependency tracing, and regex-based reference searching. No file-write or network-outbound capabilities are defined.
- Sanitization: Not specified.
Audit Metadata