root-cause-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external, potentially untrusted data such as system logs, metrics, and traces, which creates a surface for indirect prompt injection attacks.
- Ingestion points: The
prompts/root-cause-analysis.mdfile explicitly specifies that the skill should process symptoms, timeline data, logs, metrics, traces, and reproduction conditions supplied by the user or system. - Boundary markers: The prompt does not define explicit structural delimiters (e.g., XML tags) for the ingested data, although it instructs the agent to "Audit the input" and "separate confirmed facts, working assumptions, and open questions."
- Capability inventory: The skill is intended to produce "executable" artifacts and utilizes the "current toolchain" for hypothesis verification, which may involve file system reads or command execution as indicated in
SKILL.mdandprompts/root-cause-analysis.md. - Sanitization: The skill relies on the agent's manual audit of input credibility, recency, and comparability rather than automated sanitization or strict schema enforcement for the ingested logs.
Audit Metadata