b2c-job-health
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and analyze job logs and execution details from external sources using tools like
webdav_getandlogs_get_recent. These logs are considered untrusted data that could potentially contain malicious content or instructions aimed at influencing the agent's logic. - Ingestion points: Job log files retrieved via
webdav_get(SKILL.md, Step 3) and parsed log entries vialogs_get_recent(references/job-logs.md). - Boundary markers: The instructions do not specify the use of delimiters or warnings to separate log content from the agent's instructions.
- Capability inventory: The skill environment includes file read capabilities (
webdav_get,webdav_list) and CLI execution via theb2ctoolset. - Sanitization: No explicit validation or sanitization steps are documented for the log data before it is processed by the agent.
- [COMMAND_EXECUTION]: The skill relies on the
b2cCLI tool for several operations includingb2c setup inspect,b2c job search, andb2c job log. These are standard administrative commands required for the skill's primary function of job health monitoring.
Audit Metadata