agent-production-operations
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a production-to-evaluation feedback loop where production traces and incident records are sampled and reviewed to generate new evaluation cases (
references/trace-to-eval-feedback.md). This creates an ingestion surface for untrusted data that could influence the agent's future evaluation logic.\n - Ingestion points: Production traces, incident records, tool failure outputs, and user feedback are listed as data sources for sampling and review in
references/trace-to-eval-feedback.md.\n - Boundary markers: The skill instructions specify that all sampled traces must be scrubbed of PII before entering the feedback pipeline, providing a layer of data isolation.\n
- Capability inventory: The skill itself is a set of markdown-based instructions and schemas; it does not contain active scripts for file-writing or network operations, but it instructs the agent to participate in the trace-to-eval pipeline.\n
- Sanitization: Explicit instructions are provided for scrubbing PII (names, emails, credentials) from traces before they are used for evaluation case generation.
Audit Metadata