kubespray-offline-infra
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates system-level configuration through commands like
sysctl,iptables,nmcli, andsystemctl. These are required for managing network routing (NAT), DNS (bind), and synchronization services (chrony). It also includes examples of service initialization, such as setting updevpiwith a temporary empty password. - [EXTERNAL_DOWNLOADS]: The skill references the installation of standard Linux utilities (bind, nginx, createrepo) and Python mirror tools (devpi, python-pypi-mirror) from official package registries. These downloads are from well-known sources and are consistent with the skill's primary purpose.
- [PROMPT_INJECTION]: The skill has an indirect injection surface through the ingestion of external data from
requirements.txtfiles and remote software repositories. Evidence chain: (1) Ingestion point:requirements.txtfile content inSKILL.md; (2) Boundary markers: None present in the provided shell snippets; (3) Capability inventory: System management viadnf,pip, andsystemctlacross the admin server; (4) Sanitization: No explicit validation or sanitization of external repository metadata or package names is described.
Audit Metadata