diagnose
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
zillizCLI to retrieve cluster and collection information through commands likezilliz cluster describe,zilliz cluster metrics, andzilliz billing usage. These operations are essential for its diagnostic purpose and are strictly read-only. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and analyzes data returned by the
zillizCLI to form troubleshooting conclusions. While it does not implement explicit boundary markers for this external data, the risk is negligible due to the limited scope of the tool. - Ingestion points: Output from various
zillizcommands specified in the 'Collect' sections of both cluster and collection diagnosis. - Boundary markers: The skill instructions do not specify the use of delimiters or 'ignore' instructions for the data returned by the CLI.
- Capability inventory: Capabilities are restricted to executing shell commands within the
zilliztoolset. The skill does not possess file-writing, persistence, or non-vendor network communication capabilities. - Sanitization: No explicit sanitization or validation of identifiers (e.g., cluster IDs, collection names) is required in the instructions beyond standard CLI usage.
Audit Metadata