creating-replay-vision-scanners
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements financial safeguards by instructing the agent to use
vision-scanners-estimate-createandvision-quota-retrieveto avoid exceeding organizational budgets. - [PROMPT_INJECTION]: The skill facilitates the automated analysis of session recording data, which is an inherent surface for indirect prompt injection.
- Ingestion points: Session recordings and metadata processed in SKILL.md via
vision-scanners-create. - Boundary markers: No explicit delimiters for untrusted session data are defined in the instructions.
- Capability inventory: Use of
vision-scanners-create,vision-scanners-update, andvision-scanners-observations-listtools. - Sanitization: No visual or event data sanitization is specified prior to LLM processing.
Audit Metadata