verify-alert-before-replying
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely instructional and does not contain any executable code, scripts, or external dependencies.
- [SAFE]: It implements security best practices for AI agents by requiring human-in-the-loop review ('Draft, don't post') and cross-referencing claims from external alerts against multiple internal data sources (logs, metrics, and Kubernetes status) to prevent misinformation.
- [INDIRECT_PROMPT_INJECTION]: While the skill is designed to process untrusted data from monitoring alerts which could theoretically contain malicious instructions, the workflow mitigates this risk by treating the alert as a 'claim' to be verified rather than an instruction to be followed. The agent is instructed to perform independent verification using structured API calls and CLI tools, which reduces the likelihood of an injection succeeding.
Audit Metadata