add-analytics-instrumentation
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from multiple sources including file contents, directory structures, and git commit history. * Ingestion points: Step 1a reads file contents directly; Step 1b reads git commit logs and bodies. * Capability inventory: The agent uses this data to summarize logic, scan for patterns, and eventually generate instrumentation plans via downstream skills. * Boundary markers: The skill lacks explicit instructions or markers to distinguish between data content and control instructions, potentially allowing embedded text in comments or commits to influence agent behavior. * Sanitization: No explicit sanitization or filtering of the ingested code or commit messages is defined.
- [COMMAND_EXECUTION]: The skill performs shell-level operations to explore the codebase. * Evidence: Step 1b uses
git log --all --grep="<patterns>"andgrepto find relevant code based on user-supplied feature descriptions. While standard for codebase analysis, these commands rely on parameters derived from natural language input.
Audit Metadata