monte-carlo-incident-response
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill processes external data from platform sources like alerts and table metadata, which represents a surface for indirect prompt injection. This is consistent with its role as an incident response orchestrator.
- Ingestion points: Alerts and monitor data are retrieved via platform tools like get_alerts, search, and get_monitors.
- Boundary markers: No explicit boundary markers or delimiters for untrusted data are defined in this orchestration file.
- Capability inventory: Includes searching assets, checking lineage, and updating data monitors on the platform.
- Sanitization: No specific validation of platform metadata is defined in this coordination script.
- [DATA_EXFILTRATION]: The skill accesses platform-specific metadata such as alerts, table schemas, and monitor configurations. This access is necessary for the intended incident response functionality and occurs within the vendor's ecosystem.
- [SAFE]: No malicious patterns, obfuscation, or unauthorized external communications were detected. The orchestration follows a logical and secure progression using local sub-skill references.
Audit Metadata