ratel-observability-assessment
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to run standard utilities like jq, grep, cat, and test for stack detection and dependency analysis within the repository manifest files.- [DATA_EXFILTRATION]: The skill reads project configuration files such as package.json, requirements.txt, and pyproject.toml using the Read and Bash tools. It specifically searches for dependency names and environment variable keys related to observability platforms to determine existing configurations.- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes untrusted content from the repository manifest files to drive its assessment logic.
- Ingestion points: Project manifest files (package.json, pyproject.toml, requirements.txt, uv.lock) are read into the agent context in Step 1 of the workflow.
- Boundary markers: The skill does not employ explicit delimiters or instructions to the agent to ignore potentially malicious instructions embedded within these files.
- Capability inventory: The skill has access to Bash, Read, Write, Edit, Glob, and Grep tools, allowing for file system manipulation based on its analysis.
- Sanitization: No validation or sanitization is performed on the content of the manifest files before they are processed by the agent.
Audit Metadata