aiops-gordon
Pass
Audited by Gen Agent Trust Hub on Feb 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- COMMAND_EXECUTION (LOW): The file
scripts/validate.shperforms local diagnostic checks using commands likedocker version,docker info, anddocker ai --helpto ensure the environment is correctly configured. These are non-destructive, standard verification operations. - PROMPT_INJECTION (LOW): The skill documentation and integration scripts (e.g., in
TOOLS.mdandexamples.md) encourage piping local files likeDockerfileorlogs.txtinto thedocker aicommand. This creates an indirect prompt injection surface. - Ingestion points: Files are ingested via shell redirection (
<) inscripts/review-dockerfile.sh,scripts/validate-compose.sh, and several examples. - Boundary markers: The prompts do not use delimiters or explicit instructions to ignore potentially malicious embedded content within the analyzed files.
- Capability inventory: The tool is designed to generate Dockerfiles, Compose configurations, and troubleshooting advice based on the input.
- Sanitization: There is no evidence of pre-processing or sanitization of the file content before it is processed by the AI service.
Audit Metadata