signals-scout-first-report
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security threats or malicious patterns were identified. The skill is limited to a single reporting tool and focuses on factual data analysis.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data sources (logs, traces, analytics), which presents a potential surface for indirect injection.
- Ingestion points: Error tracking, logs, traces, metrics, product analytics, AI observability, and session recordings as described in the investigation criteria.
- Boundary markers: No specific boundary markers or 'ignore' instructions for data separation are provided in the skill text.
- Capability inventory: The skill is restricted to using the
emit_reporttool for output. - Sanitization: The skill logic relies on factual verification and checking findings against multiple sources, but no explicit technical sanitization of external data is mentioned.
Audit Metadata