skills/jeremylongshore/claude-code-plugins-plus-skills/istio-service-mesh-config/Gen Agent Trust Hub
istio-service-mesh-config
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [No Code] (SAFE): The skill consists entirely of markdown documentation and metadata. No scripts (.py, .js, .sh) are included or referenced.
- [Command Execution] (SAFE): Although the skill requests 'Bash' and 'Write' tools, there are no predefined commands or logic that would trigger unsafe execution. The risk is limited to the agent's general use of these tools during task performance.
- [Prompt Injection] (SAFE): No patterns of instruction override, role-play jailbreaks, or system prompt extraction were detected in the description or purpose fields.
- [Indirect Prompt Injection] (LOW): The skill defines a surface for processing external Istio configurations. If an attacker provides a malicious configuration file for the agent to 'Read' or 'Edit', it could influence the agent's behavior.
- Ingestion points: User-provided Istio configuration files and requests.
- Boundary markers: Absent.
- Capability inventory: Read, Write, Edit, Bash, Grep.
- Sanitization: None provided in this skill definition.
Audit Metadata