telemetry
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to execute shell commands such as
log streamand local project scripts like./script/build_and_run.sh. These are standard developer operations for monitoring application behavior and managing build loops. - [INDIRECT_PROMPT_INJECTION]: The skill establishes a workflow where the agent reads and verifies live application logs. This creates an ingestion point for untrusted data, as logs emitted by the application or other system processes could potentially contain malicious instructions aimed at influencing the agent's subsequent actions.
- Ingestion points: The output of the
log streamcommand is ingested by the agent for verification (SKILL.md, step 4). - Boundary markers: No explicit delimiters or boundary markers are defined to help the agent distinguish between telemetry data and potential instructions.
- Capability inventory: The agent has the capability to execute local build scripts and use developer tools like
build-run-debug. - Sanitization: The skill does not prescribe any sanitization or filtering of the log content before it is processed by the agent.
Audit Metadata