monitor-usage
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from various system logs, which acts as a vulnerability surface for indirect prompt injection. If an attacker can influence log entries (e.g., by naming a journey or modifying a user object), they could embed instructions meant to manipulate the agent's behavior during log interpretation.
- Ingestion points: Audit logs retrieved via the
queryLogstool, as described in the query patterns within SKILL.md. - Boundary markers: The instructions do not include any delimiters or directives to the agent to treat log content as untrusted or to ignore instructions found within the logs.
- Capability inventory: The skill is authorized to access and interpret authentication logs (
am-authentication), configuration logs (am-config), access logs (idm-access), and activity logs (idm-activity). - Sanitization: No sanitization, escaping, or validation of the log content is prescribed before the agent processes and reports on the findings.
Audit Metadata