error-debugging-error-trace
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The
ErrorTrackingAnalyzerscript inresources/implementation-playbook.mduses Python'sast(Abstract Syntax Trees) andpathlibmodules to programmatically traverse and analyze the project's source code for error handling patterns. - [DATA_EXPOSURE]: The skill performs broad file read operations across the project directory (
rglob('*.{js,ts,py,java,go}')) to collect metrics on error handling and logging usage. - [EXTERNAL_DOWNLOADS]: The implementation examples reference several standard industry packages for observability, including Sentry SDKs, Winston for logging, and Elasticsearch transports.
- [DATA_EXFILTRATION]: The provided code samples for
ErrorTracker(TypeScript) andSlackAlertChannel(Python) include functionality to transmit error events and alerts to external endpoints (APIs and webhooks) as part of standard monitoring workflows. - [PROMPT_INJECTION]: The skill processes the project's codebase as untrusted input during the analysis phase. While it uses static analysis (AST parsing and regex), reading external files constitutes a potential ingestion surface for indirect prompt injection if the agent interprets comments or strings in those files as instructions.
Audit Metadata