incident-responder

Pass

Audited by Gen Agent Trust Hub on Jul 31, 2026

Risk Level: SAFENO_CODE
Full Analysis
  • [NO_CODE]: The skill package consists exclusively of markdown instructions and JSON metadata. No scripts, binaries, or automated tool configurations are included, meaning no code is executed by the skill itself.
  • [INDIRECT_PROMPT_INJECTION]: The skill instructions define processes for ingesting external data, which is a potential surface for indirect prompt injection. 1. Ingestion points: Alerts, system logs, customer reports, and Slack messages (examples/README.md). 2. Boundary markers: The skill instructs the agent to separate confirmed facts from hypotheses and speculation, which provides a conceptual boundary (SKILL.md). 3. Capability inventory: The skill does not define any external tools or executable capabilities. 4. Sanitization: No explicit content sanitization or validation logic is defined.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 31, 2026, 11:46 AM
Security Audit — agent-trust-hub — incident-responder