rabbitmq-list-queues
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to executekubectl execcommands against a RabbitMQ pod. This is consistent with the primary purpose of monitoring infrastructure status but involves high-privilege operations. - [PROMPT_INJECTION]: There is a potential for indirect prompt injection via the data retrieved from the environment.
- Ingestion points: The skill reads the output of
rabbitmqctl list_queuesfrom within theSKILL.mdcommand execution blocks. - Boundary markers: No boundary markers or instructions to treat command output as untrusted are provided.
- Capability inventory: The skill possesses the
Bashcapability and uses it to execute complex shell pipelines (grep,awk). - Sanitization: No sanitization or escaping of the queue names or status data is performed before the agent processes and displays it.
Audit Metadata