analyze-logs
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use shell commands such as
pnpm evlog,npx evlog, andnpm execto query logs, check system status, and initialize the environment. - [EXTERNAL_DOWNLOADS]: The skill suggests using
npx,bunx, ornpm execto fetch and execute the@evlog/clipackage and related dependencies from external registries if they are not already present in the project. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze log files (
.jsonl) generated by the application, which represents a surface for indirect prompt injection. - Ingestion points: The agent reads structured NDJSON/JSONL events from the
.evlog/logs/directory, including application-specific context and error messages. - Boundary markers: No specific boundary markers or instructions to ignore embedded commands within the log data are provided.
- Capability inventory: The agent has the ability to execute shell commands (
pnpm,npx,npm), read local files, and potentially make network requests via theevlogCLI or memory drain endpoints. - Sanitization: There is no evidence of sanitization or filtering of the log content before the agent is tasked with summarizing and explaining the events.
- [DATA_EXFILTRATION]: The skill directs the agent to access potentially sensitive information stored in logs, including stack traces, request paths, and custom business context such as user information and payment details, which are then processed and summarized for the user.
Audit Metadata