skills/mukul975/anthropic-cybersecurity-skills/performing-alert-triage-with-elastic-siem/Gen Agent Trust Hub
performing-alert-triage-with-elastic-siem
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection because it retrieves and processes alert data from an external Elasticsearch cluster.
- Ingestion points: Alert records are ingested from the
.siem-signals-*index using theget_open_alertsandget_alert_aggregationsfunctions inscripts/agent.py. - Boundary markers: The skill does not employ explicit delimiters or instructions to the model to ignore potentially malicious content within the alert fields.
- Capability inventory: The skill can perform network operations (connecting to Elasticsearch hosts) and write files to the disk (saving reports via
scripts/agent.py). - Sanitization: The scripts extract ECS field values such as host names, user names, and rule descriptions but do not sanitize these values before incorporating them into the final report.
Audit Metadata