signals-scout-error-tracking
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill represents an attack surface for indirect prompt injection as it processes external, untrusted data (system error logs, stack traces, and
$exceptionactivity). - Vulnerability Surface: The skill analyzes error tracking issues, which can include attacker-controlled input found in stack traces, activity names, or error messages (Category 8c
- Tool output poisoning).
- Exploitable Capabilities: The skill has high autonomy and the ability to author reports (
scout-emit-report) and manage an internal scratchpad (scout-scratchpad-write). This could allow malicious instructions in processed data to influence internal documentation or automated reporting pipelines. - Risk Factors: The skill uses simple matching (e.g.,
text=error) and automated SQL queries (execute-sql) without explicit sanitization steps for the data it interprets before including segments in reports.
Audit Metadata