debug-plan-cache-misses
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the vendor-provided
chalkCLI tool for search and configuration operations. It specifies patterns forchalk logsto query engine events andchalk configfor environment management, which are standard operations for the chalk-ai platform.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from engine logs, creating a potential surface for indirect prompt injection.\n - Ingestion points: Engine logs retrieved via the
chalk logscommand in SKILL.md.\n - Boundary markers: The skill does not define specific delimiters to isolate log content from the agent's internal instructions.\n
- Capability inventory: The skill focuses on log search, trending, and line-by-line comparison (diffing); it does not request or use capabilities for file writing, system modification, or non-vendor network access.\n
- Sanitization: No specific sanitization or filtering logic is provided for the engine log content.
Audit Metadata