signals-scout-anomaly-detection
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONPERSISTENCE
Full Analysis
- [DYNAMIC_EXECUTION]: The skill executes Python code at runtime to perform Kolmogorov-Smirnov statistical tests. This is performed via inline heredoc scripts and by fetching an internal helper script,
scripts/ks2.py, using thellma-skill-file-gettool. This execution is scoped to statistical calculations required for the skill's primary anomaly-detection purpose. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from PostHog event logs and insight properties, which is then used to generate user-facing reports and notebooks.
- Ingestion points: Data is pulled from the event database using the
execute-sql,insight-query, andinsight-gettools. - Boundary markers: The instructions do not define specific lexical delimiters to separate untrusted event data from the agent's instructions during report generation.
- Capability inventory: The skill can execute SQL queries, run Python code, and author reports/notebooks via the
scout-emit-reportandnotebooks-create-markdowntools. - Sanitization: The skill implements statistical guards (such as minimum absolute count floors and seasonality matching) but does not specifically sanitize string content for potential prompt injection vectors.
- [COMMAND_EXECUTION]: The skill utilizes
Bashto coordinate the execution of the Python interpreter for running its statistical analysis logic. - [PERSISTENCE]: The skill maintains a durable "watchlist" and baseline history using the platform's scratchpad tools (
scout-scratchpad-remember,scout-scratchpad-search). This allows the agent to maintain state and track metric performance across separate execution sessions.
Audit Metadata