ae-analysis-global
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines how to translate natural language user queries into specific CLI flags and project identifiers for
ae-clicommands. This creates a standard vulnerability surface where untrusted user input directly influences the construction of system commands. - Ingestion points: User queries referencing country, region, server, shard, site, market, or deployment areas (SKILL.md).
- Boundary markers: The skill does not define explicit boundary markers or 'ignore' instructions for the processed data.
- Capability inventory: The skill utilizes the
ae-clitool for query-cluster inventory and analysis execution (SKILL.md). - Sanitization: No explicit sanitization or validation logic is defined for the interpolated values.
- [COMMAND_EXECUTION]: The skill generates shell commands using the
ae-cliutility to retrieve cluster information and perform analysis tasks.
Audit Metadata