pagerduty-orchestration
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSMETADATA_POISONING
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves and processes event orchestration data from PagerDuty, which acts as an external ingestion point for untrusted content that could influence agent behavior.
- Ingestion points: Data is ingested through tools like
get_event_orchestration,get_event_orchestration_router, andget_event_orchestration_servicewhich query the PagerDuty API. - Boundary markers: The instructions do not define clear delimiters or specify that the agent should ignore instructions embedded within the retrieved PagerDuty rules.
- Capability inventory: The skill has the ability to modify PagerDuty configurations using
update_event_orchestration_routerandappend_event_orchestration_router_rule. - Sanitization: No sanitization or validation steps are described for the data fetched from the external API.
- [EXTERNAL_DOWNLOADS]: The skill fetches the
pagerduty-mcppackage at runtime via theuvxtool to provide its server functionality. - [METADATA_POISONING]: There is a discrepancy between the author listed in the metadata (
netclaw) and the expected vendor identification (automateyournetwork).
Audit Metadata