phoenix-error-analysis
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted trace data including inputs, outputs, and tool calls which presents a potential injection surface.
- Ingestion points: Operations like
px trace listandpx trace getinSKILL.md. - Boundary markers: No specific delimiters or warnings for trace content are defined.
- Capability inventory: Includes shell commands for file management and Phoenix CLI/GraphQL for server-side writes.
- Sanitization: Not specified for external trace data.
- [COMMAND_EXECUTION]: The skill utilizes local shell commands (e.g.,
mkdir,sed,test) to manage internal state files in the.px/coding/directory.
Audit Metadata