monte-carlo-analyze-root-cause
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill contains a standard attack surface for indirect prompt injection as it is designed to ingest and analyze untrusted data from external data warehouses and observability platforms.
- Ingestion points: The workflow processes alert metadata from
get_alerts, SQL query text fromget_query_changes, and raw data results from Database MCP integrations. - Boundary markers: The instructions do not define explicit delimiters or 'ignore' warnings for content fetched from external tools.
- Capability inventory: The agent has the capability to read local investigation playbooks and invoke external MCP tools for data analysis and version control.
- Sanitization: There are no explicit instructions to sanitize or validate the content of incident descriptions or SQL code retrieved from external sources before the agent processes them.
Audit Metadata