correlation-tracing
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill extracts trace and correlation IDs from incoming HTTP headers and incorporates them into application logs and outbound request headers. This introduces a surface for indirect prompt injection if an AI agent is later used to analyze or process these logs.
- Ingestion points: Trace IDs are read from
req.headers['x-trace-id']andreq.headers['x-span-id']inreferences/correlation-id-middleware-express.md. - Boundary markers: None. The external input is stored directly in the trace context and interpolated into log strings.
- Capability inventory: The skill writes these values to the console (
console.log) and propagates them via HTTP headers in thetracedFetchfunction. - Sanitization: There is no evidence of input validation, filtering, or escaping for the header values before they are used in logs or further propagation.
Audit Metadata