obproxy-log-analysis
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The instructions direct the agent to utilize
run_shellfor managing log archives, specifically for listing contents (tar -tzf), creating directories (mkdir), and extracting files (tar -xzf,unzip). These commands are constructed dynamically based on the results of thefile_listtool. The skill explicitly mentions that these operations require user approval. - [PROMPT_INJECTION]: The skill facilitates the ingestion of untrusted log data into the agent's context, which represents a surface for indirect prompt injection.
- Ingestion points: Log contents are ingested via
file_readand command output fromrun_shell(SKILL.md). - Boundary markers: The instructions do not prescribe the use of delimiters or specific warnings to ignore instructions found within the logs.
- Capability inventory: The agent has access to
run_shell,file_read, andfile_list(SKILL.md). - Sanitization: There is no requirement to sanitize or filter the log content before interpretation.
Audit Metadata