deploy
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to perform deployment operations and handle state machine transitions, which involves executing shell commands in the host environment. - [DYNAMIC_EXECUTION]: The skill generates and modifies infrastructure and CI/CD configuration files, including
Dockerfile, GitHub Actions workflows, and Terraform scripts. Furthermore, theself-healingagent performs up to 5 iterations of automated code modification and verification. - [INDIRECT_PROMPT_INJECTION]:\n
- Ingestion points: The skill ingests external error patterns and triggers from Sentry and Slack to activate self-healing workflows (SKILL.md).\n
- Boundary markers: No explicit delimiters or boundary markers are defined in the instructions to separate external log data from the agent's core instructions.\n
- Capability inventory: The agent possesses high-privilege capabilities including filesystem modification (
Write,Edit) and shell access (Bash) across the repository (SKILL.md).\n - Sanitization: There is no mention of sanitizing or validating the ingested log content before it is processed by the code-analyzer and task tools.
Audit Metadata