gstack-openclaw-investigate
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill follows security best practices by instructing the agent to sanitize sensitive information (IPs, hostnames, customer data, SQL) before performing external searches.
- [SAFE]: The use of
git logto investigate recent changes is a standard and safe debugging practice. - [INDIRECT_PROMPT_INJECTION]: The skill consumes untrusted data (error messages, stack traces) to perform its task. The risk of indirect prompt injection is mitigated by explicit instructions to sanitize data and gather context one question at a time. The ingestion point includes user-provided logs (SKILL.md), the capability inventory includes shell execution for git and testing (SKILL.md), and sanitization instructions are provided to strip sensitive metadata before external search.
Audit Metadata