a6-recipe-canary
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No instructions attempting to override agent behavior or bypass safety guidelines were detected.
- [CREDENTIALS_UNSAFE]: No hardcoded secrets, API keys, or private credentials were found in the instructions or example configurations.
- [DATA_EXFILTRATION]: No suspicious network operations or attempts to access sensitive local files (e.g., SSH keys, AWS credentials) were observed. The included shell script uses
curlfor a legitimate health check on a local infrastructure URL. - [REMOTE_CODE_EXECUTION]: The skill does not download or execute any untrusted remote scripts. All operations use the vendor-provided
a6CLI tool. - [COMMAND_EXECUTION]: The shell commands used (
a6,curl,sleep) are standard for infrastructure management and automation. The usage of heredocs to generate JSON payloads is a safe and standard practice in this context. - [EXTERNAL_DOWNLOADS]: No external package installations (pip, npm) or remote script fetches (curl|bash) were identified.
- [OBFUSCATION]: No encoded content, hidden characters, or homoglyphs were detected.
Audit Metadata