atmos-config
Pass
Audited by Gen Agent Trust Hub on Mar 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill describes the
commandssection, which defines custom CLI commands that execute shell steps with argument and flag interpolation. - [EXTERNAL_DOWNLOADS]: The
toolchainandvendorsections configure the downloading of external tools and components from remote registries (such as Aqua and Atmos) and repositories. - [PROMPT_INJECTION]: The skill documents a surface for indirect prompt injection where configuration manifests and CLI inputs are processed via template engines and executed as shell commands.
- [PROMPT_INJECTION]: Ingestion points:
atmos.yamlconfiguration, imported files, and command-line arguments. - [PROMPT_INJECTION]: Boundary markers: No delimiters or ignore instructions for embedded content are documented.
- [PROMPT_INJECTION]: Capability inventory: Subprocess calls (via
commands), file system access, and network operations (viaauth,stores, andtoolchain). - [PROMPT_INJECTION]: Sanitization: No explicit sanitization or validation of interpolated content is described in the documentation.
Audit Metadata