c4-container
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is comprised of markdown documentation, templates for OpenAPI specifications, and Mermaid diagram examples. It does not contain any executable scripts, binary files, or automated tasks.
- [NO_CODE]: No functional code (e.g., Python, JavaScript, or shell scripts) is associated with this skill, which eliminates common technical attack vectors such as remote code execution or privilege escalation.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze external data sources such as Kubernetes manifests and Dockerfiles to generate documentation.
- Ingestion points: Deployment configurations (Kubernetes manifests, Dockerfiles) provided by the user for analysis.
- Boundary markers: None specified in the instructions.
- Capability inventory: The skill does not include or request access to any active tools (e.g., shell, network, or file-write capabilities).
- Sanitization: No explicit validation or sanitization of input data is defined.
Audit Metadata