ops-fires
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses dynamic context injection via the
!command`` syntax to execute local binaries (ops-infra,ops-ci, andops-external) from the plugin'sbindirectory at load time to populate the dashboard data. - [COMMAND_EXECUTION]: Orchestrates various CLI tools including
aws,gh, andsentry-clithrough theBashandMonitortools to investigate service health and stream logs. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface by processing external data from Sentry error logs and project health checks. Evidence chain: 1. Ingestion points: Sentry issue descriptions and
ops-externaloutput; 2. Boundary markers: Absent; 3. Capability inventory:Bash,Agent, andTaskUpdatetools; 4. Sanitization: Absent. Risk is mitigated by the use ofAskUserQuestionto confirm agent dispatch and fixes.
Audit Metadata