verify-recent-trace

Pass

Audited by Gen Agent Trust Hub on Jun 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to use the date command in the shell to capture timestamps and calculate time ranges for Honeycomb queries. This is a standard utility used here for legitimate observability purposes.
  • [PROMPT_INJECTION]: The skill processes trace data retrieved from external sources (Honeycomb). This presents a surface for indirect prompt injection where malicious instructions embedded in trace attributes (such as span names or metadata) could attempt to influence the agent's behavior.
  • Ingestion points: Data enters the context via the outputs of mcp__honeycomb__get_query_results and mcp__honeycomb__get_trace tools.
  • Boundary markers: No explicit delimiters or warnings are used to isolate trace data from the agent's instructions.
  • Capability inventory: The skill uses tools for querying Honeycomb and reading files; it does not possess arbitrary code execution or broad network exfiltration capabilities.
  • Sanitization: There is no evidence of sanitization or validation of the data retrieved from Honeycomb before it is presented to the user or processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 15, 2026, 02:36 PM
Security Audit — agent-trust-hub — verify-recent-trace