root-cause-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze potentially untrusted external data as part of its investigation workflow.
- Ingestion points: In Phase 2 (Evidence collection), the skill instructs the agent to read source code, logs, stack traces, metrics, configuration files, and API responses.
- Boundary markers: While the skill emphasizes a strict "Evidence or it didn't happen" reasoning principle, it does not explicitly instruct the agent to use delimiters or sanitization when processing these external inputs, making it potentially vulnerable to instructions embedded in log files or code comments.
- Capability inventory: The skill utilizes powerful tools such as
git,ripgrep,kubectl,docker, and database clients to gather evidence. Maliciously crafted data in a processed file could attempt to influence the parameters passed to these tools. - Sanitization: There is no evidence of automated sanitization or escaping of external content before it is interpolated into the agent's context.
Audit Metadata