blue-green-deploy
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides shell scripts for managing production environments using
kubectl. These scripts allow for service patching, deployment status checks, and command execution inside containers (kubectl exec) for health verification.\n- [INDIRECT_PROMPT_INJECTION]: The skill defines workflows that ingest untrusted data from external monitoring systems and application health endpoints to drive automated or semi-automated deployment decisions.\n - Ingestion points:
references/details.md(Prometheus API queries) andSKILL.md(application/readyendpoint output viakubectl exec).\n - Boundary markers: Output is processed via structured tools like
jqandawkwithin shell scripts rather than being passed directly into the agent's primary prompt context.\n - Capability inventory: Deployment management via
kubectl(patch, rollout, exec) and network operations viacurl.\n - Sanitization: Shell script arguments such as deployment names and namespace identifiers are validated using regular expressions (
^[a-z0-9][a-z0-9.-]*$) and case switches to prevent command injection.
Audit Metadata