eg-migrate

Pass

Audited by Gen Agent Trust Hub on Mar 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses kubectl and helm to manage Kubernetes cluster resources, apply CRDs, and upgrade the Envoy Gateway controller. It also employs standard Unix utilities such as sed, grep, and find to automate the update of local manifest files as part of the migration process.
  • [EXTERNAL_DOWNLOADS]: Fetches deployment artifacts, including Helm charts and CRD definitions, from the official Envoy Proxy registry on Docker Hub (oci://docker.io/envoyproxy/gateway-helm). These downloads originate from a well-known, trusted service and are necessary for the skill's primary function.
  • [DATA_EXFILTRATION]: Performs a network request via curl to the local gateway IP address to verify health and connectivity. This is a standard validation step; no data is transmitted to external third-party servers.
  • [PROMPT_INJECTION]: The skill processes user-defined version strings and dynamic cluster data. 1. Ingestion points: ${From} and ${To} arguments and the output of kubectl get commands. 2. Boundary markers: Absent. 3. Capability inventory: Includes high-privilege cluster management tools like kubectl and helm. 4. Sanitization: Absent. This behavior is consistent with the functional requirements of a migration utility.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 14, 2026, 08:47 PM