log-triage
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to analyze identity logs (AWS, Azure, Google, Okta) provided as external input. This ingestion of untrusted data creates a surface for indirect prompt injection, where an attacker could embed instructions in log entries to influence the agent's reasoning.
- Ingestion points: Processes log events from AWS CloudTrail, Azure AD, and other providers mentioned in
SKILL.md. - Boundary markers: No specific delimiters or instructions are provided to the agent to distinguish between log data and instructions.
- Capability inventory: No executable code, subprocess calls, network operations, or file system writes are present in the skill.
- Sanitization: No sanitization of ingested log data is described.
Audit Metadata