ln-514-test-log-analyzer
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
child_process.execSyncwithinanalyze_test_logs.mjsto executedockeranddocker composecommands for service discovery and log collection. This is a standard operation for local development tooling. - [EXTERNAL_DOWNLOADS]: The skill is designed to interact with external Loki APIs using the
fetchAPI to retrieve logs from centralized observability stacks. These connections are triggered by user configuration or environment variables. - [PROMPT_INJECTION]: The skill processes external log data which is then interpreted by the LLM for error classification and recommendation generation. This creates an indirect prompt injection surface. The risk is mitigated by the inclusion of normalization rules in the analysis script that redact specific dynamic patterns like UUIDs and Trace IDs, reducing the likelihood of processing malicious injection payloads directly.
Audit Metadata