Incident Responder
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes comprehensive PowerShell and Bash scripts for performing forensic triage on Windows and Linux systems. These scripts use built-in system utilities to collect information about running processes, network activity, and system configurations.
- [PRIVILEGE_ESCALATION]: The provided triage scripts are explicitly designed to be run with high privileges (Administrator or root) to access necessary forensic artifacts. This is a standard and functional requirement for the skill's stated role.
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves processing external data such as system logs and file artifacts, which presents a potential attack surface for indirect prompt injection. This risk is addressed by instructional guardrails that emphasize methodical evidence preservation and factual, evidence-based reporting.
Audit Metadata