signals-scout-health-checks

Pass

Audited by Gen Agent Trust Hub on Sep 10, 2026

Risk Level: SAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill identifies a data ingestion surface in SKILL.md where untrusted project-supplied data (such as health check payloads, error messages, and database results) is processed. However, it implements exemplary security measures, including a dedicated 'Untrusted data' section that directs the agent to treat these values strictly as data, use boundary markers (quoting), and rely only on trusted remediation guidance provided by the vendor. This defensive posture effectively mitigates risks.
  • [DATA_EXFILTRATION]: The skill interacts with the platform's reporting channel and internal analytics tools. There are no patterns suggesting data exfiltration to external or untrusted domains. All network operations trace back to the vendor's own infrastructure.
  • [COMMAND_EXECUTION]: The skill utilizes execute-sql for legitimate analytical tasks, such as verifying the blast radius of health issues. The instructions scope these operations to specific system tables and read-only patterns, posing no significant command injection risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 10, 2026, 04:00 PM
Security Audit — agent-trust-hub — signals-scout-health-checks