validate-aspire-runtime
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [Command Execution] (SAFE): The skill instructs the agent to execute 'aspire run' to start the local orchestration environment. This is a standard and expected operation for the skill's stated purpose.
- [Data Exposure & Exfiltration] (SAFE): The skill references local endpoints (e.g., localhost:3000) and service names. No sensitive credentials or private keys are hardcoded or targeted for exfiltration.
- [Prompt Injection] (SAFE): The instructions are clear and do not contain attempts to bypass safety filters or override system prompts.
- [Indirect Prompt Injection] (LOW): The skill processes external data from tool outputs which presents an attack surface. Evidence: 1. Ingestion points: list_resources and list_structured_logs outputs. 2. Boundary markers: None specified. 3. Capability inventory: 'aspire run' command execution. 4. Sanitization: No explicit sanitization of tool output before agent processing.
Audit Metadata