diagnose

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the zilliz CLI to retrieve cluster and collection information through commands like zilliz cluster describe, zilliz cluster metrics, and zilliz billing usage. These operations are essential for its diagnostic purpose and are strictly read-only.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests and analyzes data returned by the zilliz CLI to form troubleshooting conclusions. While it does not implement explicit boundary markers for this external data, the risk is negligible due to the limited scope of the tool.
  • Ingestion points: Output from various zilliz commands specified in the 'Collect' sections of both cluster and collection diagnosis.
  • Boundary markers: The skill instructions do not specify the use of delimiters or 'ignore' instructions for the data returned by the CLI.
  • Capability inventory: Capabilities are restricted to executing shell commands within the zilliz toolset. The skill does not possess file-writing, persistence, or non-vendor network communication capabilities.
  • Sanitization: No explicit sanitization or validation of identifiers (e.g., cluster IDs, collection names) is required in the instructions beyond standard CLI usage.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 06:56 AM
Security Audit — agent-trust-hub — diagnose