omh-security-event-response
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external, potentially untrusted data including security advisory text, vulnerability scanner output, and package registry metadata.
- Ingestion points: The agent receives external content related to CVEs, advisories, and scanner results as part of the triage workflow described in
SKILL.md. - Boundary markers: There are no explicit instructions to use delimiters or sanitization wrappers for this external data, which could allow malicious instructions embedded in advisories to influence the agent's logic.
- Capability inventory: The skill primarily generates text-based artifacts (event records, analysis, and plans). It explicitly states that it does not perform network operations, registry contacts, or automated rotations, which significantly limits the potential impact of an injection.
- Sanitization: The instructions do not mandate specific sanitization or escaping of the external content before processing.
Audit Metadata