bk-cli-paas
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
bk-clicommand-line utility to perform administrative tasks on the BlueKing PaaS platform. This is a functional requirement for the skill's purpose and uses a vendor-specific tool within its intended scope. - [INDIRECT_PROMPT_INJECTION]: The skill reads external data from the PaaS platform via commands like
get_deployment_resultandmodule_env_released_info(found inSKILL.md). This represents an ingestion point for untrusted data. While there are no explicit boundary markers or sanitization logic mentioned for these outputs, the skill's current capabilities are limited to standard CLI interactions, posing a low risk that is typical for tools managing external resources.
Audit Metadata