extend-vm-storage
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes a local shell script
./scripts/extend_vm_storage.shwith user-provided arguments for node identification and size increments. - [COMMAND_EXECUTION]: Invokes
kubectlto perform cluster-level administrative actions (drain and uncordon) andgrepto inspect local configuration files likemain.tf. - [REMOTE_CODE_EXECUTION]: Executes administrative commands on the Proxmox virtualization host via SSH (e.g.,
qm shutdown,qm resize,qm start) and performs guest-level filesystem operations using SSH to thewizardaccount. - [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection via user-supplied parameters. 1. Ingestion points: User-provided
<node-name>and<size-increment>parameters are interpolated into shell commands inSKILL.md. 2. Boundary markers: Absent; there are no instructions to validate or escape user input before execution. 3. Capability inventory: The skill has extensive capabilities including local command execution, remote SSH execution on infrastructure hosts, and Kubernetes cluster management. 4. Sanitization: None specified in the skill instructions; security relies entirely on the internal validation logic of the unprovided./scripts/extend_vm_storage.shfile.
Audit Metadata