deployment-runbook
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents and utilizes several command-line tools and local scripts for operational tasks, including
kubectlfor log retrieval,gitfor versioning,psqlfor database connectivity testing, and custom shell scripts such asdeploy.sh,run_migrations.sh, andswitch_traffic.shfor deployment orchestration. - [EXTERNAL_DOWNLOADS]: The included health check script (
scripts/health_check.py) uses therequestslibrary to perform connectivity tests against configured API endpoints using well-known placeholder domains (e.g.,api.example.com). - [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection during troubleshooting operations. (1) Ingestion points: The agent is instructed to read and diagnose application error logs via
kubectl logsandtailin the troubleshooting section ofSKILL.md. (2) Boundary markers: No specific delimiters are defined to isolate untrusted log data from agent instructions. (3) Capability inventory: The skill possesses the ability to execute various deployment and traffic-switching shell scripts and perform network operations. (4) Sanitization: There is no explicit sanitization step for the content of logs before agent analysis.
Audit Metadata