sealos-s3
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various commands using
sealos-cliand a local Node.js script. - Evidence:
SKILL.mdinstructs the agent to runnode <SKILL_DIR>/scripts/analyze-project-s3.mjsand varioussealos-cli s3commands for bucket and credential management. - [EXTERNAL_DOWNLOADS]: The skill may download and execute the
sealos-clitool at runtime. - Evidence:
SKILL.mdsuggests usingnpx -y sealos-cli@latest ...for one-off commands if the binary is not found locally. This fetches the package from the NPM registry. - [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection because it analyzes untrusted project files.
- Ingestion points:
scripts/analyze-project-s3.mjsscans and reads content from arbitrary project files (e.g.,.env, source code, configuration files). - Boundary markers: Absent. The instructions do not specify delimiters or warnings to ignore instructions embedded within the analyzed project files.
- Capability inventory: The skill can execute shell commands via
sealos-cliand modify local.envfiles. - Sanitization: None. The analyzer script extracts raw text patterns from files to determine storage requirements.
Audit Metadata