service-mesh-implementation
Fail
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- Remote Code Execution (CRITICAL): The file
deploy-istio.shcontains the commandcurl -L https://istio.io/downloadIstio | ISTIO_VERSION=$VERSION sh -. This executes an external script directly in the shell without any verification of its content or integrity. - External Downloads (HIGH): The skill initiates downloads from
https://istio.io. While this is the official domain for the Istio project, it is not included in the predefined 'Trusted External Sources' list, making the source unverified by this security policy. - Command Execution (HIGH): The script executes several powerful commands using
kubectlandistioctl, includingistioctl install,kubectl label namespace, andkubectl rollout restart. These commands modify the security and operational state of the Kubernetes cluster.
Recommendations
- AI detected serious security threats
Audit Metadata