agency-incident-responder
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8) because its primary function involves analyzing untrusted system data such as logs, process lists, and forensic artifacts.
- Ingestion points: The agent processes output from its provided triage scripts (found in SKILL.md), which capture volatile system data including event logs, process command lines, and network connections.
- Boundary markers: There are no explicit instructions or delimiters provided to the agent to differentiate between its logic and malicious instructions that could be embedded in the analyzed data.
- Capability inventory: The agent's role includes interpreting system state and recommending containment actions, which could be influenced by malicious data.
- Sanitization: The skill lacks mechanisms for sanitizing or escaping the content of forensic logs before the agent processes them.
- [COMMAND_EXECUTION]: The skill includes shell and PowerShell script templates for system-wide forensic data collection.
- The scripts require administrative or root privileges to execute, which is standard and necessary for digital forensics.
- These scripts are provided as clear-text templates for the user and do not contain hidden or obfuscated execution patterns.
Audit Metadata