review-logging-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes user project files to suggest logging patterns, creating a vulnerability surface for indirect prompt injection. 1. Ingestion points: The agent reads codebase files such as 'nuxt.config.ts' and server handlers during review tasks. 2. Boundary markers: No delimiters or specific instructions are provided to the agent to prevent it from following potentially malicious instructions contained within the user's code. 3. Capability inventory: The skill uses shell execution ('npx @evlog/cli'), file system modification (writing to 'AGENTS.md'), and package installation ('npm install'). 4. Sanitization: There is no requirement for the agent to sanitize the content of the project files it ingests before using that information.
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation and use of the 'evlog' and '@evlog/cli' packages from the npm registry, which are resources associated with the skill's functionality.
- [COMMAND_EXECUTION]: The agent is instructed to run CLI commands such as 'npx @evlog/cli init' to automate the configuration and scoring of logging coverage within a project.
Audit Metadata