harness-pipeline
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No indicators of malicious behavior, obfuscation, or unauthorized access were detected within the skill documentation or command structures.
- [COMMAND_EXECUTION]: The skill utilizes
curlfor making REST API requests to Harness. The provided command examples use--data-urlencode, which is a security best practice for safely interpolating parameters into URL-encoded requests. - [PROMPT_INJECTION]: The skill ingests external data such as branch names and Jira issue keys.
- Ingestion points:
--pipeline,--branch,--jira,--execution, and--stagearguments in SKILL.md. - Boundary markers: None explicitly defined, although the documentation references a validation step via
issue-validator. - Capability inventory: Network operations via
curlto Harness API endpoints. - Sanitization: Employs
--data-urlencodefor API parameters, reducing the risk of injection during command assembly.
Audit Metadata