devops-deployment
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFECREDENTIALS_UNSAFEDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [CREDENTIALS_UNSAFE]: Hardcoded default database credentials (such as "postgres:postgres" and "orchestkit:dev_password") are present in "scripts/docker-compose.yml" and "references/docker-patterns.md". While these are intended as placeholders for local development environments, they represent a security anti-pattern.\n- [DYNAMIC_CONTEXT_INJECTION]: The skill utilizes the "!"command"" syntax in "scripts/create-ci-pipeline.md" and "scripts/create-docker-compose.md" to execute shell commands (e.g., "grep", "ls", "wc") during skill load. These commands are used to auto-detect project types and versions to provide context to the agent and are classified as benign functionality.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project data, creating a potential injection surface.\n
- Ingestion points: Project configuration files like "package.json" and "pyproject.toml" are scanned using shell commands to populate the agent's context.\n
- Boundary markers: No specific delimiters or instructions are used to separate ingested data from the prompt instructions.\n
- Capability inventory: The skill supports shell command execution and file writing operations based on the ingested context.\n
- Sanitization: No sanitization or validation is performed on the output of the auto-detection commands before interpolation.\n- [EXTERNAL_DOWNLOADS]: The skill references several external documentation sources and repositories from well-known and trusted services such as GitHub, Kubernetes, Vercel, and HashiCorp. These references are documented neutrally as they belong to established organizations.
Audit Metadata