logging-sucks
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external source code and pull request data, creating a potential surface for indirect prompt injection. 1. Ingestion points: Application code and pull request contents processed during logging audits or instrumentation tasks (SKILL.md, evals/evals.json). 2. Boundary markers: No explicit boundary markers or delimiters are defined in the instructions to isolate processed data. 3. Capability inventory: The skill implies the ability to modify source code based on reviewed logs. 4. Sanitization: The skill contains specific instructions to identify and redact sensitive information such as credentials, cookies, and personal identifiers before they are logged.
- [SAFE]: No security issues detected. The instructions promote best practices for data privacy and structured logging.
- [NO_CODE]: The skill consists of markdown documentation and evaluation files with no executable scripts included.
Audit Metadata