omni-gateway-logs
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill's primary function is to interpret untrusted log data provided by users or external systems, creating a surface for indirect prompt injection.
- Ingestion points: User-provided log excerpts and files described in SKILL.md and evals.json.
- Boundary markers: The skill does not provide explicit delimiters or instructions to the agent to isolate and ignore embedded instructions within the logs.
- Capability inventory: The agent is instructed to provide diagnostic shell commands and reference other installation and configuration skills based on log analysis.
- Sanitization: No sanitization, validation, or filtering of the log content is specified.
- [COMMAND_EXECUTION]: The documentation includes several CLI commands for system interaction, such as
sudo journalctl,docker logs, andkubectl logs. While intended for manual operator use, an agent with shell tool access might attempt to execute these commands directly.
Audit Metadata