logfire-gateway
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the repository it is operating on, which creates a potential surface for indirect prompt injection attacks.
- Ingestion points: The skill instructs the agent to "inspect the repository and identify the existing model client, model, provider, environment loader, and runnable entrypoint" in
SKILL.md. - Boundary markers: No specific boundary markers or instructions to disregard embedded commands in the source code are provided.
- Capability inventory: The agent has the capability to write to configuration and environment files (Step 3), run build commands, formatters, type checkers, and execute a live network request for verification (Step 4).
- Sanitization: There is no explicit sanitization or validation process described for the content ingested from the repository before it is used to determine subsequent actions.
Audit Metadata