cicd-integration
Fail
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The script
scripts/run_cicd-integration.pygenerates CI/CD pipeline configurations for Jenkins and Azure DevOps that include commands to download and execute the official Rust installation script fromhttps://sh.rustup.rsusing a shell pipe. This is a common pattern for toolchain setup from a recognized official source. - [INDIRECT_PROMPT_INJECTION]: The skill accesses and processes repository files to generate or optimize CI/CD configurations, creating a potential attack surface. Ingestion points: Repository files are read using
read_fileandcodex_read_fileas defined inagents/openai.yamlandSKILL.md. Boundary markers: The instructions do not specify the use of delimiters or instructions to ignore embedded commands when the agent processes these external files. Capability inventory: The agent has access to powerful tools includingbash,write,git,docker, andkubectl. Sanitization: There are no explicit directives for the agent to sanitize or filter data from repo files before using it in tool calls or generating executable scripts. - [COMMAND_EXECUTION]: The skill utilizes standard developer shell commands including
git,docker,kubectl,terraform, andansibleto manage version control, container orchestration, and infrastructure deployment.
Recommendations
- HIGH: Downloads and executes remote code from: https://sh.rustup.rs - DO NOT USE without thorough review
Audit Metadata