ops-investigate-alert
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external data from monitoring logs, commit messages, and alert descriptions without sanitization or boundary markers.\n
- Ingestion points: Data is ingested from monitoring MCP tools and the GitHub API (commits, tags) as described in SKILL.md.\n
- Boundary markers: The instructions do not provide delimiters or warnings to the agent to ignore instructions embedded in logs or commit data.\n
- Capability inventory: The skill has access to the Bash tool, which is used to execute GitHub CLI commands.\n
- Sanitization: There is no evidence that data retrieved from external sources is sanitized or validated before being processed.
Audit Metadata