observability
Pass
Audited by Gen Agent Trust Hub on Apr 26, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data in the form of agent event logs which may contain outputs from external tools or web content.
- Ingestion points: The
scripts/query_logs.pyscript reads JSONL log files from the.agents/logs/directory. - Boundary markers: None identified in the script output; logs are presented as structured tables or JSON blocks to the agent.
- Capability inventory: The skill includes file-read capabilities (limited to JSONL parsing) and stdout writing. It does not perform network operations or execute shell commands.
- Sanitization: The script uses standard
json.loadsfor parsing, which prevents code execution but does not filter the content of the log messages.
Audit Metadata