observability-slo-mapping-auditor
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external business signals (JSON/CSV), which serves as an ingestion point for potentially untrusted content.\n
- Ingestion points: The
run.pyscript reads data from a user-specified file path usinginput_path.read_text().\n - Boundary markers: The implementation does not include specific delimiters or instructions to the agent to ignore embedded commands within the processed data.\n
- Capability inventory: The script has the capability to read from and write to the local file system based on CLI arguments.\n
- Sanitization: No validation or sanitization is performed on the ingested JSON payload beyond standard parsing.
Audit Metadata