logging-patterns

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill serves as a guide for implementing effective logging in Java applications. The provided configuration for Spring Boot and Logback uses standard parameters and follows secure development practices. No malicious code, obfuscation, or unauthorized access patterns were found.
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion and analysis of application logs, which are external data sources that could theoretically be manipulated to include malicious instructions targeting the analyzing agent.
  • Ingestion points: Analysis of app.log via cat and jq commands in SKILL.md.
  • Boundary markers: Not explicitly defined in the suggested commands.
  • Capability inventory: The skill documentation describes read-only analysis and standard debugging workflows.
  • Sanitization: Structured field extraction via jq provides basic structural validation of the data.
  • [EXTERNAL_DOWNLOADS]: The skill documentation includes a Maven configuration for the logstash-logback-encoder library. This is a well-established and trusted third-party library in the Java ecosystem used for producing structured logs.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 09:56 AM
Security Audit — agent-trust-hub — logging-patterns