signals-scout-health-checks
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a data ingestion surface in
SKILL.mdwhere untrusted project-supplied data (such as health check payloads, error messages, and database results) is processed. However, it implements exemplary security measures, including a dedicated 'Untrusted data' section that directs the agent to treat these values strictly as data, use boundary markers (quoting), and rely only on trusted remediation guidance provided by the vendor. This defensive posture effectively mitigates risks. - [DATA_EXFILTRATION]: The skill interacts with the platform's reporting channel and internal analytics tools. There are no patterns suggesting data exfiltration to external or untrusted domains. All network operations trace back to the vendor's own infrastructure.
- [COMMAND_EXECUTION]: The skill utilizes
execute-sqlfor legitimate analytical tasks, such as verifying the blast radius of health issues. The instructions scope these operations to specific system tables and read-only patterns, posing no significant command injection risk.
Audit Metadata