signals-scout-insight-alerts
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources which could be used to influence the agent's behavior.
- Ingestion points: Alert firing history via alert-get, alert configurations via alerts-list, insight data via insight-get, and existing inbox reports via inbox-reports-list and inbox-reports-retrieve as described in SKILL.md.
- Boundary markers: Absent; the skill instructions do not specify the use of delimiters or markers to isolate untrusted data from system instructions.
- Capability inventory: The skill is capable of authoring and modifying reports using the emit_report and edit_report tools as defined in SKILL.md.
- Sanitization: Absent; there are no instructions for sanitizing, escaping, or validating the ingested alert or insight data before it is processed or included in reports.
Audit Metadata