devops
Fail
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructions in
SKILL.mdinclude a command to install the Google Cloud SDK by piping a remote script directly to a shell (curl https://sdk.cloud.google.com | bash). This operation targets an official Google Cloud domain. - [COMMAND_EXECUTION]: The
scripts/cloudflare_deploy.pyutility uses the Pythonsubprocessmodule to execute thewranglerCLI tool for automating worker deployments. This is a functional requirement for the skill's stated purpose. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The browser rendering references in
references/browser-rendering.mdandreferences/cloudflare-workers-advanced.mddemonstrate ingesting external web content viapage.goto()andpage.content(). - Boundary markers: None are present in the code examples to distinguish between processed web data and agent instructions.
- Capability inventory: The skill possesses capabilities for command execution via
subprocess.runin deployment scripts and file system manipulation through Dockerfile generation examples. - Sanitization: While best practices for sanitizing extracted content are mentioned in documentation, they are not implemented in the provided functional code snippets.
Recommendations
- HIGH: Downloads and executes remote code from: https://sdk.cloud.google.com - DO NOT USE without thorough review
Audit Metadata