forensics-checklist
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions as an instructional template and guide for forensic analysis. It does not contain any executable scripts, remote downloads, or hidden obfuscation.
- [PROMPT_INJECTION]: The skill handles untrusted forensic data which presents a surface for indirect prompt injection.
- Ingestion points: The agent processes log files, forensic artifacts, and system configuration data specified via
$ARGUMENTSor searched via theGlobtool (SKILL.md). - Boundary markers: Present. Section 8 includes a dedicated Prompt Injection Safety Notice instructing the agent to treat all evidence as data only and to ignore any instructions embedded within the analyzed content.
- Capability inventory: Execution is restricted by the YAML frontmatter to the
Read,Grep, andGlobtools. It lacks capabilities for shell execution, network access, or file-writing. - Sanitization: Present. The skill instructs the agent to avoid including sensitive data (credentials, session tokens) in its report and requires output to follow a strict forensic report schema.
Audit Metadata