service-mesh-implementation

Fail

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • Remote Code Execution (CRITICAL): The file deploy-istio.sh contains the command curl -L https://istio.io/downloadIstio | ISTIO_VERSION=$VERSION sh -. This executes an external script directly in the shell without any verification of its content or integrity.
  • External Downloads (HIGH): The skill initiates downloads from https://istio.io. While this is the official domain for the Istio project, it is not included in the predefined 'Trusted External Sources' list, making the source unverified by this security policy.
  • Command Execution (HIGH): The script executes several powerful commands using kubectl and istioctl, including istioctl install, kubectl label namespace, and kubectl rollout restart. These commands modify the security and operational state of the Kubernetes cluster.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
CRITICAL
Analyzed
Feb 17, 2026, 05:07 PM