firetiger-monitor-deploy
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves processing untrusted data from external sources, which is a common surface for indirect injection.
- Ingestion points: Analysis of GitHub PR diffs via the
monitor_prtool and processing of GitHub comments (e.g.,@firetigermentions). - Boundary markers: The instructions do not explicitly specify delimiters or boundary markers for the AI when processing PR content, though this is typical for monitoring agents.
- Capability inventory: The skill utilizes MCP tools to manage agents and sessions (
send_agent_message,read_agent_messages), and provides examples for using theghCLI andcurlfor deployment registration. - Sanitization: Data sanitization is handled by the backend Firetiger monitoring service rather than within the skill instructions.
Audit Metadata