rudder-ai-events-verify
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches verification and analysis utilities from official RudderStack package registries and repositories (NPM, PyPI, and GitHub). These downloads are restricted to vendor-owned resources relevant to the skill's purpose.
- [COMMAND_EXECUTION]: The skill employs several package managers and runtime environments (npm, npx, uv, and go) to execute the event validation suite and the local mock server script.
- [INDIRECT_PROMPT_INJECTION]: The skill processes event data and logs which are treated as untrusted input, creating a potential attack surface if the ingested data contains malicious instructions.
- Ingestion points: The checker tools read captured event data from the
events.jsonlfile. - Boundary markers: The instructions provide explicit warnings to only read expected fields and to treat all captured content as untrusted.
- Capability inventory: The skill environment allows for schema validation and local file writing via the
mock_server.pyscript. - Sanitization: The documentation provides clear guidance against executing content found in payloads and recommends redacting sensitive information before data sharing.
Audit Metadata