provenance
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The execution script
run_provenance.pyinvokes the internalAgentSessionto manage the processing pipeline. This is a standard execution pattern for the skill's purpose and does not involve arbitrary command execution. - [INDIRECT_PROMPT_INJECTION]: The skill ingests operation logs from
trace_summary.jsonto generate audit summaries. While this constitutes a data ingestion surface, the implementation is focused on logging and statistical reporting within a local directory, which is consistent with its stated purpose of providing system observability.
Audit Metadata