triage-dependency-outages
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill retrieves and processes incident descriptions and status updates from external providers via the OutageDeck API. This content is incorporated into the agent's context, creating an indirect prompt injection surface.
- Ingestion points: Data enters through
get_provider_status,get_incident_details, andlist_active_incidents(SKILL.md). - Boundary markers: No explicit delimiters or 'ignore' instructions are defined for wrapping external API responses.
- Capability inventory: The skill has access to state-modifying tools like
add_custom_provider,update_custom_provider, andremove_custom_provider. - Sanitization: No sanitization of the external status data is required in the instructions.
- [EXTERNAL_DOWNLOADS]: Connects to the OutageDeck MCP endpoint at https://outagedeck.com/api/mcp. This resource belongs to the vendor's official domain and is used for its intended diagnostic purpose.
Audit Metadata