sre-engineer
Fail
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: CRITICALCOMMAND_EXECUTIONDYNAMIC_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill contains multiple Python scripts and documentation examples that utilize the
subprocessmodule to execute external commands. Specifically, it provides automation for restarting Kubernetes deployments viakubectl, managing system services viasystemctl, and performing network traffic control usingtcandiptables. - [DYNAMIC_EXECUTION]: In
references/automation-toil.md, the skill defines a runbook automation system that usessubprocess.run(..., shell=True). Executing commands through a shell wrapper is a sensitive pattern that can lead to command injection if input parameters are not strictly validated. - [PRIVILEGE_ESCALATION]: The provided automation scripts are designed to perform operations that require administrative or root-level access. This includes modifying system-level network configurations for chaos engineering and managing production-grade infrastructure, which represents a significant grant of authority to the agent.
- [EXTERNAL_DOWNLOADS]: The skill references an external documentation URL (
jeffallan.github.io). This domain and theSKILL.mdfile itself were flagged by automated reputation scanners as malicious. While these flags may be heuristic false positives triggered by the skill's automation patterns, they indicate that the resource originates from a non-verified source.
Recommendations
- HIGH: Downloads and executes remote code from: http://prometheus:9090/api/v1/query?query={urllib.request.quote(query)} - DO NOT USE without thorough review
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata