cekura-generate-scenarios
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted production call transcripts via
mcp__cekura__call_logs_retrieveto identify failure modes and draft new scenario instructions. Malicious content within a transcript could theoretically attempt to influence the agent's logic during the clustering or drafting phase. - Ingestion points: Transcription data retrieved from
mcp__cekura__call_logs_retrievein the Step 1 and Step 3 workflows. - Boundary markers: No explicit delimiters or instructions to ignore embedded prompts within the transcripts are provided in the instructions.
- Capability inventory: Access to
mcp__cekura__scenarios_create,mcp__cekura__call_logs_create_scenarios, and file system tools (Write,Edit,Bash). - Sanitization: The skill does not explicitly sanitize or filter the transcript content before interpolating it into drafting logic or report generation.
- [COMMAND_EXECUTION]: The skill uses
Bash,Write, andEdittools to generate and save a markdown report (failure_scenarios_<agent_id>.md) in the local working directory. This is a standard operational requirement for the skill's reporting functionality. - [SAFE]: External references to
dashboard.cekura.aianddocs.cekura.aiare official vendor domains associated with the skill's author and are used for legitimate documentation and dashboard linking purposes.
Audit Metadata