security-response-incident-response
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data during its analysis phases, which creates a potential vulnerability surface where malicious instructions hidden in logs or files could attempt to influence the agent.
- Ingestion points: Phase 2 (Detection & Analysis) and Phase 6 (Post-Incident) describe the ingestion of external logs, snapshots, and forensic evidence files into the agent's context.
- Boundary markers: The instructions do not explicitly define the use of delimiters or clear "ignore embedded instructions" warnings for the ingested log data, though evidence hashing is required for integrity.
- Capability inventory: The skill has access to
Bash,Write,Edit, andReadtools, which could be targeted by successful injection attempts. - Sanitization: The skill mandates strict redaction of PII, credentials, tokens, and internal IPs in its output rules, which helps mitigate the impact of data exposure during the incident response process.
Audit Metadata