eg-migrate
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
kubectlandhelmto manage Kubernetes cluster resources, apply CRDs, and upgrade the Envoy Gateway controller. It also employs standard Unix utilities such assed,grep, andfindto automate the update of local manifest files as part of the migration process. - [EXTERNAL_DOWNLOADS]: Fetches deployment artifacts, including Helm charts and CRD definitions, from the official Envoy Proxy registry on Docker Hub (
oci://docker.io/envoyproxy/gateway-helm). These downloads originate from a well-known, trusted service and are necessary for the skill's primary function. - [DATA_EXFILTRATION]: Performs a network request via
curlto the local gateway IP address to verify health and connectivity. This is a standard validation step; no data is transmitted to external third-party servers. - [PROMPT_INJECTION]: The skill processes user-defined version strings and dynamic cluster data. 1. Ingestion points:
${From}and${To}arguments and the output ofkubectl getcommands. 2. Boundary markers: Absent. 3. Capability inventory: Includes high-privilege cluster management tools likekubectlandhelm. 4. Sanitization: Absent. This behavior is consistent with the functional requirements of a migration utility.
Audit Metadata