logging
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides middleware that ingests the X-Correlation-Id header from external HTTP requests and includes it in the logging context. This creates a surface for untrusted data ingestion. * Ingestion points: CorrelationIdMiddleware in SKILL.md reads from context.Request.Headers. * Boundary markers: No explicit delimiters or instructions are provided to isolate this input. * Capability inventory: The data is stored in logging properties and returned in response headers. * Sanitization: No validation or escaping is performed on the incoming string.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill incorporates security best practices by explicitly documenting anti-patterns that warn developers against logging sensitive data like passwords and PII.
Audit Metadata