ovstorage-user-handle-errors
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists entirely of markdown documentation providing guidance on interpreting error responses from storage tools. It does not include any executable scripts, shell commands, or external dependencies.
- [DATA_EXPOSURE]: The documentation explicitly addresses data sensitivity, noting that error messages are redacted of tokens and keys by default. It provides proactive warnings to treat error message fields as sensitive, which aligns with security best practices for log and error handling.
- [INDIRECT_PROMPT_INJECTION]: While the skill defines how an agent should process data returned by external tools (the error envelopes), it does not introduce new ingestion surfaces. The guidance provided—specifically advising the agent to use stable error codes rather than pattern-matching human-readable messages—serves to harden the agent against potential manipulation of the message content.
Audit Metadata