observability-designer
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external JSON configuration files which are then used to generate monitoring specifications, creating a surface for indirect prompt injection.
- Ingestion points: Data enters the skill context through methods like load_alert_config and load_service_definition in scripts/alert_optimizer.py, scripts/dashboard_generator.py, and scripts/slo_designer.py.
- Boundary markers: The scripts do not implement delimiters or boundary markers when interpolating data from these files into generated configurations.
- Capability inventory: The skill's capabilities are restricted to generating and writing local JSON files; it lacks network access, subprocess execution, or dynamic code evaluation features.
- Sanitization: There is no evidence of input validation or escaping for text data ingested from external service definitions or alert configurations.
Audit Metadata