yb-perf
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from potentially untrusted external sources, which could be leveraged to influence agent behavior if the source data is compromised.
- Ingestion points: Ingests data from the Prometheus Query API via
scripts/metrics-check.shand from YugabyteDB system views likepg_stat_statementsandpg_stat_activityviascripts/must-check.sql. - Boundary markers: No explicit delimiters or boundary markers are used to isolate ingested data from the agent's internal instruction context.
- Capability inventory: The skill has access to shell execution (
bash,curl), database interaction (ysqlsh), and container management (kubectl). - Sanitization: Uses Python's
json.loadfor safe data parsing inmetrics-check.sh, but relies on standard shell variable interpolation for constructing queries and commands. - [DYNAMIC_EXECUTION]: The skill employs dynamic scripting and command templating for its operational logic.
- Python execution:
scripts/metrics-check.shexecutes an inline Python script usingpython3 -cto perform JSON parsing and statistical analysis of metrics. - Command templating:
scripts/all-nodes.shimplements an--execmode that dynamically constructs and runs shell commands by replacing a{host}placeholder in a user-provided string template. - [COMMAND_EXECUTION]: The skill's primary functionality is delivered through shell scripts (
all-nodes.sh,metrics-check.sh) that invoke system binaries includingcurl,kubectl, andysqlshto perform network requests and manage database nodes.
Audit Metadata