mirror-doctor
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various commands from the goldsky CLI tool to manage cloud resources, including monitoring, restarting, resizing, and deleting pipelines. These actions are the primary intended function of the skill for administrative troubleshooting and are restricted to the vendor's command suite.
- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it ingests and processes output from the goldsky CLI which could originate from untrusted sources. Ingestion points: Data enters the context via goldsky pipeline monitor and goldsky pipeline get commands as described in SKILL.md. Boundary markers: The instructions lack explicit delimiters or instructions to ignore potential commands embedded in the ingested CLI output. Capability inventory: The agent can perform impactful operations including pipeline deletion and configuration updates. Sanitization: There is no mention of sanitization or validation of CLI output before it is processed by the agent.
Audit Metadata