error-diagnostics-error-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted error data through the $ARGUMENTS variable, creating a surface for indirect prompt injection.
- Ingestion points: The $ARGUMENTS parameter in SKILL.md.
- Boundary markers: Absent for interpolated diagnostic data.
- Capability inventory: Instructions to perform experiments and propose system fixes.
- Sanitization: Explicit instructions to redact secrets and PII from diagnostics.
- [EXTERNAL_DOWNLOADS]: The implementation playbook includes code examples and configuration for trusted observability platforms.
- Evidence: References to Sentry (@sentry/node, @sentry/react), DataDog (ddtrace), and OpenTelemetry.
- Context: These tools originate from well-known service providers and represent standard diagnostic practices.
Audit Metadata