obproxy-log-analysis

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The instructions direct the agent to utilize run_shell for managing log archives, specifically for listing contents (tar -tzf), creating directories (mkdir), and extracting files (tar -xzf, unzip). These commands are constructed dynamically based on the results of the file_list tool. The skill explicitly mentions that these operations require user approval.
  • [PROMPT_INJECTION]: The skill facilitates the ingestion of untrusted log data into the agent's context, which represents a surface for indirect prompt injection.
  • Ingestion points: Log contents are ingested via file_read and command output from run_shell (SKILL.md).
  • Boundary markers: The instructions do not prescribe the use of delimiters or specific warnings to ignore instructions found within the logs.
  • Capability inventory: The agent has access to run_shell, file_read, and file_list (SKILL.md).
  • Sanitization: There is no requirement to sanitize or filter the log content before interpretation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 01:49 AM
Security Audit — agent-trust-hub — obproxy-log-analysis