lazycat-aipod-developer
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a directive for the agent to execute
lzc-cli box defaultto automatically retrieve the default box name, which facilitates configuration without requiring repetitive user input. - [EXTERNAL_DOWNLOADS]: The documentation references official Docker images (e.g., from registry.lazycat.cloud) used for service deployment and routing on the AI Pod platform.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-provided application build configurations and manifests, which represents a theoretical attack surface for indirect instructions.
- Ingestion points: Application configuration and build manifest files (e.g., manifest.yml, lzc-build.yml, docker-compose.yml, as described in references/aipod-app-spec.md).
- Boundary markers: None explicitly defined in the provided instructions.
- Capability inventory: File system access for packaging applications and execution of the lzc-cli tool.
- Sanitization: No specific content filtering or sanitization of the input files is described.
Audit Metadata