openshift-docs
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSOBFUSCATION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a
convert.pyscript and aMakefilethat utilizesubprocess.runand shell commands. - These files are development utilities designed to convert AsciiDoc source files into Markdown during the setup phase.
- The AI agent's runtime environment is restricted by the
allowed-toolsfrontmatter tocat,grep,find, andls, preventing it from executing these scripts. - The script uses
yaml.safe_load()for parsing configuration files, adhering to security best practices. - [EXTERNAL_DOWNLOADS]: The
Makefilecontains agit clonecommand targeting the officialopenshift/openshift-docsrepository on GitHub. - This is a vendor-owned resource used for document synchronization and is categorized as safe per the trusted vendor rules.
- [OBFUSCATION]: Several documentation files (e.g.,
admission-plug-ins.md,cco-mode-mint.md) contain Base64 encoded strings within image data URIs. - These are standard implementations for embedding icons and diagrams directly in Markdown/HTML and do not contain executable code or hidden instructions.
- [SAFE]: The core instructions in
SKILL.mdare benign and encourage the agent to prioritize retrieved documentation over potentially outdated pre-trained knowledge. No markers associated with prompt injection or data exfiltration were found.
Audit Metadata