senior-devops
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOW
Full Analysis
- Prompt Injection (SAFE): The skill contains standard instructional language without any attempts to bypass safety filters or override system instructions.
- Data Exposure & Exfiltration (SAFE): There are no network requests, hardcoded credentials, or access to sensitive file paths (like SSH keys or AWS credentials) in the scripts.
- Command Execution (SAFE): The scripts use standard Python libraries for file path validation and do not use dangerous functions like
os.systemorsubprocess.runto execute arbitrary commands. - Obfuscation (SAFE): No encoded strings, hidden characters, or homoglyphs were found in the source code or documentation.
- Indirect Prompt Injection (SAFE): While the tools accept user-provided paths, they do not parse or execute content from files in a way that could influence agent behavior.
Audit Metadata