secrets-management
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external system auditing tools, which represents an attack surface for indirect prompt injection if those systems contain malicious content.
- Ingestion points: The agent processes output from the
homelab_containerScan,homelab_ufwStatus,homelab_fail2banStatus, andhomelab_openPortstools as described in the Workflow section of SKILL.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands within tool outputs are defined.
- Capability inventory: The skill is limited to auditing tools and specific management tools like
homelab_volumeBackup. It does not include arbitrary code execution or direct network exfiltration capabilities. - Sanitization: No explicit sanitization or validation of the data returned by the auditing tools is performed before the agent reviews it.
Audit Metadata