debug-buttercup
Pass
Audited by Gen Agent Trust Hub on Apr 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
kubectlto perform cluster diagnostics, including retrieving logs, describing pod status, and executing commands inside containers (e.g.,redis-cli,df,stat). It also references local shell scripts (diagnose.shandcollect-logs.sh) intended for automated triage. - [DATA_EXFILTRATION]: While the skill accesses sensitive diagnostic information such as environment variables (
OTEL,CORPUS) and database metrics viaredis-cli, no network operations were detected that would transmit this data outside the cluster environment. - [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection because it ingests untrusted data through
kubectl logsandkubectl execoutputs. Malicious content residing in logs or container files could potentially attempt to influence the agent's behavior. - Ingestion points:
kubectl logsandkubectl execoutputs (SKILL.md) - Boundary markers: Absent; the skill does not specify delimiters or instructions to ignore embedded commands in the processed data
- Capability inventory: Shell command execution via
bashandkubectl(SKILL.md) - Sanitization: Absent; output from the cluster is processed without evident filtering or escaping.
Audit Metadata