otel-span-events-to-logs-migration
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes external source code to perform migrations, creating a surface for indirect instructions embedded in the processed data.
- Ingestion points: The
scripts/scan-span-events.shutility identifies files for the agent to read and modify. - Boundary markers: No explicit delimiters or instructions are provided to the agent to disregard natural language instructions found within the code comments or strings of the files being analyzed.
- Capability inventory: The agent is instructed to modify files and execute a local shell script.
- Sanitization: The skill does not implement specific sanitization or validation of the content read from the codebase.
- [COMMAND_EXECUTION]: The skill utilizes a local shell script
scripts/scan-span-events.shto facilitate the discovery of relevant code patterns. The script uses standard utilities (grep) and operates within the user-specified directory.
Audit Metadata