a7
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
a7CLI to create, inspect, and update gateway resources. It provides several shell scripts (e.g., inreferences/recipes/canary.mdandreferences/recipes/blue-green.md) that demonstrate how to automate these operations using the CLI andcurlfor verification. - [DYNAMIC_EXECUTION]: The skill documents the configuration of the
serverlessandext-pluginplugins. These features allow the API7 gateway to execute custom Lua functions (references/plugins/serverless.md) and external binaries written in Go, Java, or Python (references/plugins/ext-plugin.md). These are documented as core extension points for the managed gateway service. - [INDIRECT_PROMPT_INJECTION]: The skill includes instructions for configuring AI gateway features that process untrusted data from external LLM providers.
- Ingestion points: Untrusted data enters the agent context when the gateway is configured to proxy requests to AI providers via the
ai-proxyplugin (documented inreferences/plugins/ai-proxy.md). - Boundary markers: The
ai-prompt-templateandai-prompt-decoratorplugins are used to define fixed structures and system instructions that serve as boundaries for user-supplied prompts (documented inreferences/plugins/ai-prompt-template.mdandreferences/plugins/ai-prompt-decorator.md). - Capability inventory: The
a7CLI has the capability to modify gateway configuration, while the gateway itself can perform network operations and execute custom logic via other plugins. - Sanitization: The documentation describes using the
ai-content-moderationplugin to detect and block toxic or harmful content in AI requests and responses (documented inreferences/plugins/ai-content-moderation.md).
Audit Metadata