kubespray-offline-infra

Pass

Audited by Gen Agent Trust Hub on Feb 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill facilitates system-level configuration through commands like sysctl, iptables, nmcli, and systemctl. These are required for managing network routing (NAT), DNS (bind), and synchronization services (chrony). It also includes examples of service initialization, such as setting up devpi with a temporary empty password.
  • [EXTERNAL_DOWNLOADS]: The skill references the installation of standard Linux utilities (bind, nginx, createrepo) and Python mirror tools (devpi, python-pypi-mirror) from official package registries. These downloads are from well-known sources and are consistent with the skill's primary purpose.
  • [PROMPT_INJECTION]: The skill has an indirect injection surface through the ingestion of external data from requirements.txt files and remote software repositories. Evidence chain: (1) Ingestion point: requirements.txt file content in SKILL.md; (2) Boundary markers: None present in the provided shell snippets; (3) Capability inventory: System management via dnf, pip, and systemctl across the admin server; (4) Sanitization: No explicit validation or sanitization of external repository metadata or package names is described.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 28, 2026, 04:44 AM