verify-recent-trace
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
datecommand in the shell to capture timestamps and calculate time ranges for Honeycomb queries. This is a standard utility used here for legitimate observability purposes. - [PROMPT_INJECTION]: The skill processes trace data retrieved from external sources (Honeycomb). This presents a surface for indirect prompt injection where malicious instructions embedded in trace attributes (such as span names or metadata) could attempt to influence the agent's behavior.
- Ingestion points: Data enters the context via the outputs of
mcp__honeycomb__get_query_resultsandmcp__honeycomb__get_tracetools. - Boundary markers: No explicit delimiters or warnings are used to isolate trace data from the agent's instructions.
- Capability inventory: The skill uses tools for querying Honeycomb and reading files; it does not possess arbitrary code execution or broad network exfiltration capabilities.
- Sanitization: There is no evidence of sanitization or validation of the data retrieved from Honeycomb before it is presented to the user or processed by the agent.
Audit Metadata