genkit-observability-python
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to fetch and process external content to perform its core functions, creating a vulnerability surface where malicious instructions in that data could influence the agent's behavior.
- Ingestion points: The agent is directed to use
search_genkit_docsandread_genkit_docsto retrieve content from external markdown files (e.g.,python/devtools.md,python/local-observability.md). - Boundary markers: The skill lacks explicit instructions or delimiters to isolate the retrieved documentation or warn the agent to ignore any embedded natural language instructions within those documents.
- Capability inventory: The skill involves 'Build' and 'Audit' workflows which include defining schemas, generating code, and executing verification commands or tests.
- Sanitization: No filtering, validation, or sanitization processes are defined for the external content before it is interpolated into the agent's decision-making context.
Audit Metadata