kafka-integration-testing
Pass
Audited by Gen Agent Trust Hub on Feb 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing several well-known Python packages from public registries to support Kafka testing. Evidence:
SKILL.mdreferencespip install testcontainers[kafka],confluent-kafka, andmsgspec. - [COMMAND_EXECUTION]: The troubleshooting documentation suggests system-level commands to manage permissions and processes. Evidence:
references/reference.mdsuggestssudo usermod -aG docker $USERfor Docker permissions andkill -9 <PID>for port conflicts. - [PROMPT_INJECTION]: The skill involves consuming data from external Kafka brokers, creating a potential surface for indirect prompt injection if message content is not properly handled. Evidence: 1. Ingestion points:
OrderEventConsumer.consume()inSKILL.mdandexamples/examples.md. 2. Boundary markers: Not specified for message payload content. 3. Capability inventory: The skill allows access to theBashtool. 4. Sanitization: No sanitization of message content is demonstrated in the examples.
Audit Metadata