chaos-engineer
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION] (SAFE): The skill includes YAML and shell templates using
curlandkubectl. These are used for legitimate purposes such as querying Prometheus metrics for health checks and managing chaos engine resources. The commands are static examples and do not involve unsafe user input interpolation. - [EXTERNAL_DOWNLOADS] (SAFE): The skill references standard public container images like
curlimages/curlin Argo Workflow templates. These are trusted sources within the SRE/DevOps domain and are used as intended for service interaction. - [DATA_EXFILTRATION] (SAFE): Although
curlis used, the target endpoints are internal (e.g.,prometheus/api/v1/query) or local health check endpoints. There is no evidence of sensitive data access or transmission to untrusted domains. - [REMOTE_CODE_EXECUTION] (SAFE): No instances of downloading and piping remote scripts to interpreters (e.g.,
curl | bash) were found. The embedded scripts are restricted to health verification logic.
Audit Metadata