infrahub-analyzing-diagnostics
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted diagnostic logs and service data provided in a bundle. While the instructions include specific rules to filter volatile content and mask credentials, the ingestion of external data presents a surface for indirect instructions embedded in logs to influence agent behavior.\n
- Ingestion points: The agent reads file content from
bundle/logs/as defined inSKILL.mdandreference.md.\n - Boundary markers: There are no explicit delimiters or specific 'ignore embedded instructions' warnings for the log content being processed.\n
- Capability inventory: The skill allows the use of
Bash(forgrep,find, andghsearch),Read(filesystem access), andWrite(report generation).\n - Sanitization: The
rules/report-evidence-per-finding.mdfile mandates that the agent identify and mask any credential-shaped strings before including log excerpts in the final report.\n- [COMMAND_EXECUTION]: The skill makes use of theBashtool to executegrepandfindfor log analysis and theghCLI for searching GitHub issues in theopsmill/infrahubrepository. These operations are essential for the skill's purpose and are constrained by instructions to read-only diagnostic activities.
Audit Metadata