detect-anomalies
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and summarize data from external Axiom datasets, which constitutes an indirect prompt injection surface. If a dataset contains malicious instructions within indexed fields (e.g., error messages, status codes), these could potentially influence the agent's behavior when generating the anomaly report.
- Ingestion points: Data returned from
axiom queryoperations described inSKILL.md(e.g., volume anomalies, new values, rare events). - Boundary markers: Absent. The skill does not instruct the agent to use specific delimiters or instructions to ignore potential commands embedded in the dataset content.
- Capability inventory: Access to
Bash(axiom CLI) for querying and configuration as defined in theallowed-toolsfrontmatter. - Sanitization: Absent. The skill provides direct APL queries for data retrieval without specifying sanitization or escaping of the resulting values before inclusion in the final report.
Audit Metadata