error-debugging-error-trace
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFEDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface because it reads project source files to analyze error patterns. Malicious instructions hidden in codebase comments could potentially influence the agent's analysis.
- Ingestion points: The
ErrorTrackingAnalyzerscript inresources/implementation-playbook.mdrecursively reads all source files in a target directory. - Boundary markers: No specific delimiters are used to isolate codebase content from the agent's instructions.
- Capability inventory: The skill allows reading local source files and provides templates for network-based logging.
- Sanitization: The skill explicitly includes a
sanitizeEventfunction designed to redact keys such as 'password', 'token', 'secret', and 'api_key'. - [DATA_EXFILTRATION]: The skill provides patterns for exporting error data to external endpoints (e.g., custom APIs or Slack webhooks). While standard for monitoring, this establishes a mechanism for data egress. The provided code mitigates this risk by filtering cookies and redacting sensitive credentials from events before they are sent.
Audit Metadata