service-mesh
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches installation and setup scripts from official vendor domains (
istio.ioandrun.linkerd.io). - [COMMAND_EXECUTION]: Executes infrastructure management commands using
kubectl,istioctl, andlinkerdto configure service mesh components, sidecar injection, and observability tools. - [INDIRECT_PROMPT_INJECTION]: Ingests and processes Kubernetes YAML manifests which could serve as a vector for indirect instructions if the data source is untrusted.
- Ingestion points: YAML configuration files (e.g.,
virtualservice.yaml,authz-policy.yaml) applied to the cluster. - Boundary markers: Not present in the provided templates.
- Capability inventory: Includes the ability to modify cluster network routing, security policies (mTLS), and authorization rules via
kubectl,istioctl, andlinkerdsubprocess calls. - Sanitization: No validation or sanitization of the manifest content is implemented within the skill instructions.
Audit Metadata