oncall-triage
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes alert titles, summaries, and labels fetched from Grafana OnCall, which presents a surface for indirect prompt injection. Maliciously crafted data in an alert could potentially attempt to override agent instructions or influence its decision-making process.
- Ingestion points: The agent retrieves alert data via the
gcx irm oncall alert-groups listandgcx irm oncall alert-groups getcommands as defined inSKILL.md. - Boundary markers: There are no specific instructions or delimiters provided to the agent to segregate external alert content from its primary instructions.
- Capability inventory: The skill is granted access to the
Bashtool and can execute state-altering commands such asacknowledge,silence,resolve, anddeletethrough thegcxCLI. - Sanitization: The skill does not implement filtering or sanitization of the alert data before it is processed by the agent context.
- [COMMAND_EXECUTION]: The skill instructions utilize the
Bashtool to run thegcxCLI andjqfor data processing and alert management. This is the intended functionality of the skill for interacting with the Grafana OnCall service.
Audit Metadata