canton-troubleshooting
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface (Category 8). It instructs the AI agent to accept and analyze user-supplied error messages and then generate or implement code solutions based on that input. This creates a risk where a malicious user could provide a crafted 'error message' that contains hidden instructions to influence the agent's behavior.\n
- Ingestion points: The 'AI Agent Prompt' section (SKILL.md) explicitly takes user input in the form of a 'Canton error'.\n
- Boundary markers: No delimiters or safety instructions are defined to separate user data from the agent's operational instructions.\n
- Capability inventory: The instructions command the agent to 'implement fetch-then-exercise with exponential-backoff retry', which involves generating functional code or logic.\n
- Sanitization: The skill does not include any mechanisms for validating or sanitizing the content of the error messages before they are processed by the agent.\n- [NO_CODE]: This skill consists of documentation and instructional prompts and does not include any executable scripts or configuration files.
Audit Metadata