log-analyzer
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from diverse log sources which could contain embedded malicious instructions.
- Ingestion points: Log files (*.log), journalctl system logs, Docker/Kubernetes container logs, AWS CloudWatch, GCP Logging, and ELK Stack query results.
- Boundary markers: The instructions do not specify explicit delimiters or "ignore previous instruction" wrappers for the content retrieved from logs.
- Capability inventory: The skill performs file reading and potentially uses CLI tools or APIs to fetch logs, but contains no internal executable scripts or network exfiltration logic.
- Sanitization: The skill specifically mandates the masking of sensitive information (passwords, tokens, phone numbers) during processing.
- [SAFE]: The skill incorporates privacy-preserving instructions, specifically requiring the agent to perform data masking on credentials and personal information. It also explicitly forbids the agent from hallucinating or inventing information not present in the source logs.
Audit Metadata