a6-plugin-limit-req
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill interacts with the
a6command-line utility to manage Apache APISIX routes and plugin configurations, which is the primary intended functionality. - [PROMPT_INJECTION]: The skill defines an attack surface for indirect prompt injection by processing external configuration data through shell command templates.
- Ingestion points: Plugin configuration fields such as
rate,burst,key, anduridefined inSKILL.mdexamples. - Boundary markers: The examples use quoted heredocs (e.g.,
<<'EOF') which is a security best practice to prevent the local shell from expanding variables within the data block. - Capability inventory: The skill is capable of performing
a6 route createanda6 route updateoperations via subprocess execution. - Sanitization: While the skill uses quoted heredocs to protect against immediate shell injection, it does not explicitly describe application-level validation for the configuration values themselves.
Audit Metadata