error-diagnostics-error-trace
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFEDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill contains code templates designed to transmit error logs, performance metrics, and alerts to external service endpoints.
- Evidence:
resources/implementation-playbook.md: TheErrorTrackerclass uses thefetchAPI to send JSON-encoded error events to a configuredendpointwith an Authorization header.resources/implementation-playbook.md: TheSlackAlertChannelusesaiohttpto send POST requests containing alert data to a Slackwebhook_url.- Note: The skill demonstrates good security practice by including a
sanitizeEventfunction that redacts sensitive keys such as 'password', 'token', 'secret', and 'api_key' before transmission. - [PROMPT_INJECTION]: The skill includes an automated analysis script that reads local codebase files, which creates an ingestion surface for indirect prompt injection.
- Evidence Chain:
- Ingestion points:
resources/implementation-playbook.mdcontains theErrorTrackingAnalyzerwhich reads the content of all files matching common programming extensions usingPath(project_path).rglob('*'). - Boundary markers: The provided script does not utilize boundary markers or explicit instructions to ignore embedded agent commands within the analyzed files.
- Capability inventory: The skill possesses capabilities for file system traversal and network operations (HTTP POST) via the included code patterns.
- Sanitization: While data sanitization is present for credential redaction in the logging service, the code analysis tool does not specifically filter or sanitize the file content it processes.
Audit Metadata