incident-response
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSNO_CODE
Full Analysis
- [COMMAND_EXECUTION]: The skill requests permission to use the
Bashtool. This is intended for running diagnostics and troubleshooting commands during production incidents, as demonstrated in the runbook templates. - [EXTERNAL_DOWNLOADS]: The skill utilizes
WebFetchto perform network operations. Examples include service health checks targeting the author's own domain,api.greyhaven.io. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it is designed to ingest and act upon data from production systems that may contain untrusted input.
- Ingestion points: The agent is instructed to read system logs and monitor diagnostic output using tools like
BashandGrep. - Boundary markers: None; the templates do not provide delimiters or specific instructions to the agent to treat system output as untrusted data.
- Capability inventory: The agent has broad shell access via
Bashand the ability to modify files withWrite. - Sanitization: There are no provided instructions or scripts for sanitizing or validating logs before processing.
- [NO_CODE]: The skill package is composed entirely of Markdown files containing documentation, guides, and templates. It does not include active scripts, binaries, or automated execution logic.
Audit Metadata