incident-response-report
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted investigation data such as 'source material', 'telemetry source', and 'log families' to generate reports. This ingestion of external data creates a surface for indirect prompt injection where malicious instructions hidden in logs could influence the agent's behavior.
- Ingestion points: The skill explicitly consumes 'source material' and 'telemetry' from the investigation environment as specified in SKILL.md.
- Boundary markers: No specific delimiters or safety instructions are defined to separate untrusted telemetry data from the agent's core instructions.
- Capability inventory: The skill directs the agent to execute specific enrichment tools located at /root/Tools/IncidentResponseScripts/vpnchecker.sh and /root/Tools/IncidentResponseScripts/ipir.sh.
- Sanitization: There is no mention of input validation or sanitization for the data processed by the report generation logic.
- [COMMAND_EXECUTION]: The skill instructions prompt the agent to run local shell scripts for IP enrichment. This involves executing /root/Tools/IncidentResponseScripts/vpnchecker.sh and /root/Tools/IncidentResponseScripts/ipir.sh with parameters derived from potentially untrusted source material. While these are utility scripts, the execution is triggered by data parsed from external telemetry.
Audit Metadata