triaging-error-issues
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process error tracking data, which by definition involves ingesting untrusted content such as exception messages, stack traces, and URLs from external environments.
- Ingestion points: Data is ingested through the
posthog:query-error-tracking-issue-eventstool, which retrieves$exception_types,$exception_values, and stack trace frames originating from the user's application code or end-user browsers. - Capability inventory: The skill's capabilities are limited to executing PostHog-specific queries and presenting summaries to the user. It does not possess file-write, shell execution, or arbitrary network access capabilities.
- Boundary markers: No specific delimiters are mandated for the summary output, though the use of Markdown tables for presentation provides some structural separation.
- Sanitization: The skill relies on standard tool outputs and does not implement additional sanitization of the error messages, relying on the agent's internal safety guardrails when interpreting processed logs.
Audit Metadata