cicd-integration

Fail

Audited by Gen Agent Trust Hub on Sep 5, 2026

Risk Level: HIGHREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The script scripts/run_cicd-integration.py generates CI/CD pipeline configurations for Jenkins and Azure DevOps that include commands to download and execute the official Rust installation script from https://sh.rustup.rs using a shell pipe. This is a common pattern for toolchain setup from a recognized official source.
  • [INDIRECT_PROMPT_INJECTION]: The skill accesses and processes repository files to generate or optimize CI/CD configurations, creating a potential attack surface. Ingestion points: Repository files are read using read_file and codex_read_file as defined in agents/openai.yaml and SKILL.md. Boundary markers: The instructions do not specify the use of delimiters or instructions to ignore embedded commands when the agent processes these external files. Capability inventory: The agent has access to powerful tools including bash, write, git, docker, and kubectl. Sanitization: There are no explicit directives for the agent to sanitize or filter data from repo files before using it in tool calls or generating executable scripts.
  • [COMMAND_EXECUTION]: The skill utilizes standard developer shell commands including git, docker, kubectl, terraform, and ansible to manage version control, container orchestration, and infrastructure deployment.
Recommendations
  • HIGH: Downloads and executes remote code from: https://sh.rustup.rs - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 5, 2026, 12:07 PM