netra-mcp-usage
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of trace data from external systems, which represents a potential attack surface for indirect prompt injection.
- Ingestion points: The agent is instructed to use
netra_query_traces,netra_get_trace_by_id, andnetra_get_session_details(SKILL.md) to retrieve trace spans and session details. - Boundary markers: There are no instructions or boundary markers defined to prompt the agent to ignore or sanitize instructions that might be embedded within trace metadata, span attributes, or logs.
- Capability inventory: The skill does not include executable scripts; however, it enables the agent to retrieve external data that could influence its reasoning or subsequent tool calls.
- Sanitization: No sanitization or validation of the trace data content is mentioned.
- [NO_CODE]: The skill does not contain any executable scripts, binaries, or automated setup files; it consists solely of markdown-based instructions for tool interaction.
Audit Metadata