openshift-docs

Pass

Audited by Gen Agent Trust Hub on Sep 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSOBFUSCATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a convert.py script and a Makefile that utilize subprocess.run and shell commands.
  • These files are development utilities designed to convert AsciiDoc source files into Markdown during the setup phase.
  • The AI agent's runtime environment is restricted by the allowed-tools frontmatter to cat, grep, find, and ls, preventing it from executing these scripts.
  • The script uses yaml.safe_load() for parsing configuration files, adhering to security best practices.
  • [EXTERNAL_DOWNLOADS]: The Makefile contains a git clone command targeting the official openshift/openshift-docs repository on GitHub.
  • This is a vendor-owned resource used for document synchronization and is categorized as safe per the trusted vendor rules.
  • [OBFUSCATION]: Several documentation files (e.g., admission-plug-ins.md, cco-mode-mint.md) contain Base64 encoded strings within image data URIs.
  • These are standard implementations for embedding icons and diagrams directly in Markdown/HTML and do not contain executable code or hidden instructions.
  • [SAFE]: The core instructions in SKILL.md are benign and encourage the agent to prioritize retrieved documentation over potentially outdated pre-trained knowledge. No markers associated with prompt injection or data exfiltration were found.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 5, 2026, 01:50 PM
Security Audit — agent-trust-hub — openshift-docs