production-health
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script at
../../scripts/production_health.pyto perform state changes and health checks. This is a standard workflow for a development-focused skill and uses a relative path within the project workspace. - [INDIRECT_PROMPT_INJECTION]: The skill identifies a potential attack surface through the ingestion of external project files which could theoretically contain malicious instructions.
- Ingestion points: The agent reads the file
../../references/PRODUCTION_HEALTH.mdand other durable project state files. - Boundary markers: Absent; there are no explicit delimiters or instructions for the agent to disregard potential instructions embedded within the health reference files.
- Capability inventory: The skill has the capability to run the
../../scripts/production_health.pyscript. - Sanitization: Absent; the skill does not specify any sanitization or validation of the content read from the project files before processing.
Audit Metadata