security-incident-playbook-generator
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists exclusively of Markdown content providing a structured template for incident response phases. There are no associated scripts, executables, or tool definitions.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to take user context (incident details) and format it into a playbook. While this represents a theoretical injection surface for data provided at runtime, the skill lacks any 'allowed-tools' or capabilities to perform actions, meaning any injected instructions would only affect the text of the generated document without impacting the security of the host system.
- [SAFE]: No malicious patterns, obfuscation, exfiltration, or persistence mechanisms were detected. The skill follows best practices for a purely instructional/template-based extension.
Audit Metadata