observability-designer
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the processing of external JSON data which may contain untrusted strings from user-supplied configurations.
- Ingestion points: The scripts
slo_designer.py,alert_optimizer.py, anddashboard_generator.pyingest user-provided JSON files through the--inputcommand-line argument. - Boundary markers: The scripts do not implement specific delimiters or instructions to ignore embedded commands within the processed JSON fields.
- Capability inventory: The toolset includes file-writing capabilities via the
--outputand--reportarguments across all included scripts. - Sanitization: No explicit sanitization or escaping of the input data is performed, relying solely on standard JSON parsing.
- Ingestion points: The scripts
Audit Metadata