structured-logging-axiom
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a logging interface in
lib/logger.tsthat accepts acontextobject containing arbitrary data. This data is often sourced from external, untrusted inputs such as HTTP request bodies or API responses. If an AI agent later processes these logs, the embedded data could contain instructions designed to influence the agent's behavior.\n - Ingestion points: The
contextparameter inLoggermethods (debug,info,warn,error) and thechildlogger method inlib/logger.ts.\n - Boundary markers: Production logs are formatted as JSON, providing structural separation between log metadata and contextual data.\n
- Capability inventory: The logger outputs to the system stdout via
console.infoand can optionally send data to Axiom via the@axiomhq/jslibrary.\n - Sanitization: The implementation automatically prefixes keys that collide with reserved log fields (e.g.,
timestampbecomesctx_timestamp), which protects the log schema but does not filter the content of the values.\n- [EXTERNAL_DOWNLOADS]: The skill provides instructions for direct integration using the@axiomhq/jspackage from the official npm registry. Axiom is a well-known observability and logging service.
Audit Metadata