skills/vodailocz/kilo-kit-mcp/devops/Gen Agent Trust Hub

devops

Fail

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill instructions in SKILL.md include a command to install the Google Cloud SDK by piping a remote script directly to a shell (curl https://sdk.cloud.google.com | bash). This operation targets an official Google Cloud domain.
  • [COMMAND_EXECUTION]: The scripts/cloudflare_deploy.py utility uses the Python subprocess module to execute the wrangler CLI tool for automating worker deployments. This is a functional requirement for the skill's stated purpose.
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: The browser rendering references in references/browser-rendering.md and references/cloudflare-workers-advanced.md demonstrate ingesting external web content via page.goto() and page.content().
  • Boundary markers: None are present in the code examples to distinguish between processed web data and agent instructions.
  • Capability inventory: The skill possesses capabilities for command execution via subprocess.run in deployment scripts and file system manipulation through Dockerfile generation examples.
  • Sanitization: While best practices for sanitizing extracted content are mentioned in documentation, they are not implemented in the provided functional code snippets.
Recommendations
  • HIGH: Downloads and executes remote code from: https://sdk.cloud.google.com - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 23, 2026, 02:33 PM