chaos-engineer
Fail
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: CRITICALCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions and scripts invoke numerous CLI tools including kubectl, aws-cli, toxiproxy-cli, and chaos-monkey. These tools are used to orchestrate failure injection experiments, which is the primary functionality of the skill.
- [PRIVILEGE_ESCALATION]: The implementation of DNS failure simulation in references/infrastructure-chaos.md utilizes sudo to modify the system's /etc/hosts file. This pattern is used specifically to intercept domain resolution for chaos testing.
- [EXTERNAL_DOWNLOADS]: A GitHub Actions workflow in references/chaos-tools.md downloads a Kubernetes manifest from https://litmuschaos.github.io. Additionally, SKILL.md includes a link to documentation hosted on https://jeffallan.github.io.
- [DYNAMIC_EXECUTION]: The skill includes Python and Bash scripts that dynamically construct and execute shell commands using subprocess.run and sh to perform activities such as resource exhaustion via stress-ng.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata