investigate
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFEPROMPT_INJECTIONDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it instructs the agent to ingest and process untrusted data from external sources which could contain malicious instructions.
- Ingestion points: Reads health checks, logs, metrics, and alerts from remote environments (SKILL.md).
- Boundary markers: None provided; the skill does not define specific delimiters to separate untrusted data from the agent's instructions.
- Capability inventory: The skill facilitates the execution of bounded commands on remote hosts, VPS, and cloud platforms (SKILL.md).
- Sanitization: No sanitization or filtering logic is defined for the external evidence gathered.
- [DATA_EXFILTRATION]: The skill's primary purpose involves accessing sensitive environments (production, staging, VPS) and gathering evidence. While the instructions explicitly forbid exposing secrets, the capability to read and process data from these environments constitutes a potential data exposure surface.
- [COMMAND_EXECUTION]: The workflow encourages the agent to use targeted commands on live systems. This capability, while necessary for the stated purpose of investigation, requires human oversight to ensure that commands intended to be read-only do not inadvertently modify production systems.
Audit Metadata