error-message-writer
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external input in the form of raw system errors or project briefs. This creates a surface for indirect prompt injection where malicious instructions could be embedded in technical logs. However, because the skill has no access to sensitive tools, the file system, or the network, the impact of such an injection is restricted to the generated text output.
- [SAFE]: The instructions incorporate security and privacy best practices by explicitly directing the agent to suppress internal system details, stack traces, and technical codes in the final user-facing response.
- [SAFE]: No obfuscation, persistence mechanisms, or unauthorized privilege escalation patterns were detected in the skill instructions.
Audit Metadata