managing-rootly
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill defines bash scripts that utilize
curlto interact with the Rootly API endpoints. These scripts use standard Unix utilities such asjq,column,sort, anduniqto filter, format, and display incident and service information from JSON responses. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection by ingesting and displaying data from an external API.
- Ingestion points: Data from the Rootly API (e.g., incident titles, summaries, and timeline events) is retrieved and output to the agent's context in
SKILL.mdduring the discovery and analysis phases. - Boundary markers: The skill does not use specific delimiters or warnings to isolate external data from the agent's primary instructions.
- Capability inventory: The skill is restricted to making network calls to the official Rootly API (
api.rootly.com) and processing the results. It does not have access to sensitive local files or arbitrary command execution capabilities. - Sanitization: The skill employs
jqto truncate certain fields (e.g.,.attributes.title[0:60]and.summary[0:200]), which provides basic length-based filtering of external content.
Audit Metadata