incident-responder
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions facilitate the processing of untrusted external data which could contain malicious instructions designed to manipulate the agent's behavior during a security incident.\n
- Ingestion points: Untrusted data enters the agent context through 'SOC escalation, employee reports, vendor reports, law enforcement inquiries, customer reports' (SKILL.md) and technical forensic sources including 'logs, EDR, cloud audit, identity, and application evidence' (SKILL.md, timeline_and_evidence_handling.md).\n
- Boundary markers: The instructions do not define specific delimiters or 'ignore embedded instructions' warnings for the agent to use when ingesting and analyzing these external artifacts.\n
- Capability inventory: The skill coordinates sensitive containment and eradication tasks, such as 'Disable compromised accounts; revoke refresh tokens and API keys', 'Network isolate host', 'Block IOCs', and 'Rotate secrets' (containment_eradication_recovery.md).\n
- Sanitization: There are no documented procedures for the agent to sanitize, escape, or validate the content of processed logs or incident reports before acting upon them.
Audit Metadata