sre-engineer
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a Bash script designed for chaos engineering that executes destructive infrastructure commands.
- Evidence:
kubectl delete pod -l app=postgresql,role=primary -n productioninSKILL.md. This command is designed to terminate primary database instances in a production environment. - Evidence:
psql -h postgres-primary-service -U app -c "SELECT COUNT(*) FROM orders..."inSKILL.md, which interacts directly with the database layer. - [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow that ingests data from external system tools and uses it to drive automated decision-making and report generation.
- Ingestion points: The script captures output from
promtool query instantandkubectl get podsinto variables likeBASELINE_ERROR_RATEandREADY_PODSinSKILL.md. - Boundary markers: Absent. The data is interpolated directly into shell logic and markdown templates without delimiters.
- Capability inventory: The skill utilizes
kubectl(delete/get),promtool,psql, and shell redirection (cat > ...) to write files inSKILL.md. - Sanitization: Absent. The script relies on
jqfor parsing but does not validate the content or range of the returned metrics before using them in conditional logic (e.g.,bc -lcomparisons).
Audit Metadata