incident-response-incident-response
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill consumes untrusted data through the
$ARGUMENTSand$SEVERITYplaceholders, which are passed to sub-agents capable of modifying production environments.\n - Ingestion points: External data enters the workflow via
$ARGUMENTSinSKILL.md, representing incident details from monitoring systems or user reports.\n - Boundary markers: The instructions lack delimiters or system-level directives to prevent the sub-agents from interpreting embedded malicious commands as legitimate instructions.\n
- Capability inventory: The sub-agents (e.g.,
incident-responder,deployment-engineer) are granted capabilities to perform traffic rerouting, rollback deployments, and resource scaling.\n - Sanitization: The input data is interpolated directly into prompts without any specified validation or escaping mechanisms.
Audit Metadata