analyze-log-signals
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [Log Analysis Security Posture]: The skill implements a robust 'Safety Contract' that significantly reduces the attack surface. It explicitly forbids the construction of raw queries (LogQL, SQL) and restricts input to opaque references.
- [Data Minimization and Redaction]: Instructions mandate the use of normalized and redacted events, ensuring sensitive information is not unnecessarily processed.
- [Restricted Tool Access]: The workflow is limited to a specific set of predefined tools, adhering to the principle of least privilege.
- [Indirect Prompt Injection Surface]: The skill processes log data, which is an external ingestion point, but managed through security controls. 1. Ingestion points:
grafana_run_packandgrafana_get_evidencetools in SKILL.md. 2. Boundary markers: The 'Safety contract' and requirements for 'normalized, redacted events' in SKILL.md serve as boundaries. 3. Capability inventory: Read-only access to specific tools in SKILL.md; no file-write or network-out capabilities. 4. Sanitization: Events are normalized and redacted before processing.
Audit Metadata