verify-prod
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and analyze external data from production logs, error reports, and merged pull requests. This untrusted data could potentially contain malicious instructions designed to influence the agent's analysis or reporting behavior.
- Ingestion points: Production logs, error reports, and pull request content (Step 4, Step 5).
- Boundary markers: The instructions do not specify any delimiters or warnings to ignore embedded instructions in the logs or PR content.
- Capability inventory: The agent is tasked with reading production data and reporting results to PRs and tickets (writing).
- Sanitization: There are no instructions for sanitizing or escaping the data retrieved from logs or PRs before processing or including it in reports.
- [NO_CODE]: The skill consists entirely of instructional text in the SKILL.md file and does not ship with any executable scripts, binaries, or configuration files that could be used for direct malicious activity.
Audit Metadata