incident-response
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze data from external, untrusted sources, which constitutes an indirect prompt injection surface.\n
- Ingestion points: Production logs, traces, and third-party API error messages as outlined in SKILL.md and references/common-failure-modes.md.\n
- Boundary markers: No delimiters or instructions are provided to help the agent distinguish between its instructions and external log data.\n
- Capability inventory: The skill includes diagnostic and mitigation tools (kubectl, docker, aws-cli, redis-cli) capable of altering system state.\n
- Sanitization: No sanitization or validation of external log content is suggested before processing.
Audit Metadata