qe-observability-testing-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill contains no malicious code, obfuscation, or unauthorized network activity. The instructions and code examples are consistent with its stated purpose of providing quality engineering patterns for observability systems.
- [INDIRECT_PROMPT_INJECTION]: The skill defines workflows for ingesting data from external sources such as databases, logs, and monitoring tools, which theoretically exposes the agent to indirect prompt injection if those sources are compromised.
- Ingestion points: Elasticsearch search results, database query outputs, Prometheus metric values, and APM trace data (SKILL.md).
- Boundary markers: None are present in the provided code examples to delimit external data from agent instructions.
- Capability inventory: The skill utilizes database queries, network requests via
httpClient, and browser automation viapage(SKILL.md). - Sanitization: No explicit sanitization or validation of the retrieved observability data is implemented in the test samples.
Audit Metadata