syslog-receiver
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to ingest and query syslog data from external network devices via UDP. This creates a surface for indirect prompt injection where an attacker could send malicious logs containing instructions to manipulate the agent's behavior during analysis.
- Ingestion points: External network devices sending logs to the
syslog_start_receivertool. - Boundary markers: The skill instructions do not specify any delimiters or warnings to ignore instructions within the syslog data.
- Capability inventory: The skill provides tools for searching (
syslog_query) and viewing (syslog_get_message) these logs. - Sanitization: There is no evidence of sanitization or filtering of the log content before it is presented to the LLM.
Audit Metadata