redis-observability

Warn

Audited by Gen Agent Trust Hub on Jun 28, 2026

Risk Level: MEDIUMPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: Metadata inconsistency detected. The skill metadata and license claim authorship by "Redis, Inc.", which contradicts the provided author context "kilo-org". This deceptive metadata can lead to misplaced trust in the skill's instructions.
  • [PROMPT_INJECTION]: Vulnerability to indirect prompt injection through log processing.
  • Ingestion points: The skill reads and processes data from SLOWLOG GET and FT.PROFILE as seen in SKILL.md and references/commands.md.
  • Boundary markers: There are no instructions provided to the agent to treat the output of these commands as untrusted data or to use delimiters.
  • Capability inventory: The agent is instructed to execute Redis diagnostic commands including INFO, CLIENT LIST, and MEMORY DOCTOR.
  • Sanitization: No sanitization or escaping mechanisms are implemented for the external data ingested from Redis.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 28, 2026, 05:51 PM
Security Audit — agent-trust-hub — redis-observability