hashicorp-vault
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute Vault CLI commands for administrative tasks such as server initialization, authentication setup, and secret management.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for indirect prompt injection by retrieving and processing data from external Vault secret engines.
- Ingestion points: Secret values and credentials retrieved via Vault CLI commands and Python scripts as described in SKILL.md.
- Boundary markers: The provided templates and commands do not include explicit delimiters or warnings to ignore embedded instructions in the secret data.
- Capability inventory: The skill utilizes the Vault CLI and Python libraries to perform network operations, file writing, and credential configuration.
- Sanitization: There is no evidence of sanitization or validation of the external secret content before it is processed by the agent.
Audit Metadata