openstack-glance
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: Sensitive configuration items, such as database and Keystone passwords, are managed using Ansible Vault placeholders (e.g.,
{{ vault_glance_database_password }}), ensuring that secrets are not hardcoded in the skill. - [COMMAND_EXECUTION]: The skill provides numerous CLI commands for system administration, including Docker service management, file ownership modification (
chown), and OpenStack resource lifecycle operations. - [EXTERNAL_DOWNLOADS]: Fetches a standard test image from the official CirrOS cloud repository for deployment verification, which is a recognized service for OpenStack environments.
- [DYNAMIC_EXECUTION]: Employs an inline Python script to parse JSON data from administrative tool outputs for storage monitoring purposes. This usage is restricted to local data processing and aligns with the skill's operational purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill includes operations that ingest output from system tools (e.g.,
openstack image list) into a Python script. While this creates a processing surface for external data, the risk is minimal given the structured format (JSON) and the administrative context.
Audit Metadata