circuit-breaker-testing
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze external data such as architectural designs, system logs, and specifications. This creates an attack surface for indirect prompt injection if the processed data contains malicious instructions. However, the skill includes a mandatory 'Input Audit' phase (documented in prompts/circuit-breaker-testing.md) that requires the agent to identify out-of-scope content and assumptions, which serves as a mitigation against following instructions embedded in the data.
- [SAFE]: The skill instructions in SKILL.md and prompts/circuit-breaker-testing.md include explicit security boundaries. The agent is strictly prohibited from injecting faults, accessing real dependencies, reading credentials, or calling production systems.
- [SAFE]: There is no evidence of obfuscation, dynamic code execution, persistence mechanisms, or unauthorized remote code execution. All logic is contained within standard markdown and YAML instruction files.
Audit Metadata