iblai-api-agent-audit
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves and processes external audit log data, which introduces a surface for indirect prompt injection if the logs contain adversarial content.
- Ingestion points: Audit log entries are fetched from the
api.iblai.appendpoint (SKILL.md). - Boundary markers: The instructions do not specify the use of delimiters or boundary markers to isolate the retrieved data from the agent's internal logic.
- Capability inventory: The skill is configured for read-only access using
curlfor HTTP GET requests. - Sanitization: The skill does not implement validation or sanitization for the content of the audit log entries before they are processed by the agent.
Audit Metadata