structured-logging-lite
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute repository-native build and test commands (Workflow Step 9) to verify logging implementations. This is standard procedure for development-related tasks.
- [PROMPT_INJECTION]: The skill provides strict operating guidelines for the agent, including explicit instructions to avoid logging sensitive data. These instructions are protective in nature and do not represent an attempt to bypass safety filters.
- [DATA_EXFILTRATION]: The skill contains specific 'Boundary Rules' and 'Gotchas' designed to prevent data exposure, such as forbidding the logging of tokens, cookies, and secret values. It promotes the use of redaction allowlists.
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection as it processes untrusted data from repository files.
- Ingestion points: Inspects manifests, logs, and code in SKILL.md.
- Boundary markers: Includes an 'Operating Contract' to limit agent behavior and safety warnings regarding PII.
- Capability inventory: Can read files, write code changes, and execute local build scripts.
- Sanitization: Focuses on output sanitization (redaction) rather than input validation.
Audit Metadata