devops-troubleshooter
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a comprehensive framework for DevOps troubleshooting without including malicious instructions, encoded payloads, or unauthorized external connections. The behavior described aligns with standard professional DevOps and SRE (Site Reliability Engineering) practices.
- [DATA_EXPOSURE_AND_EXFILTRATION]: While the skill mentions sensitive domains such as secret management (HashiCorp Vault, Kubernetes secrets) and authentication debugging (JWT, OAuth), these are listed as knowledge capabilities for troubleshooting rather than instructions to exfiltrate data. No hardcoded credentials or unauthorized data transmission patterns were found.
- [REMOTE_CODE_EXECUTION]: The skill references various CLI tools (kubectl, terraform, aws, dig, etc.) that the agent is expected to be capable of using. However, there are no instructions to download and execute arbitrary scripts from the internet (e.g., curl | bash patterns) or access untrusted remote servers.
- [INDIRECT_PROMPT_INJECTION]: The agent is designed to ingest and analyze external data sources such as system logs, application traces, and metrics. This represents an inherent attack surface where malicious instructions could be embedded in the data being troubleshot.
- Ingestion points: Ingests logs, metrics, distributed traces, and cloud provider outputs during the assessment phase (SKILL.md).
- Boundary markers: Absent. The skill does not explicitly instruct the agent to use delimiters or ignore embedded instructions within the logs it analyzes.
- Capability inventory: The agent is expected to interact with powerful administrative tools including Kubernetes clusters, cloud provider APIs, and infrastructure-as-code platforms.
- Sanitization: Absent. The skill does not provide instructions for sanitizing or escaping the content retrieved from external observability platforms.
Audit Metadata