observability-gate
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were detected. The skill is purely instructional and promotes software development best practices.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze project source code to verify compliance with observability requirements. This creates an inherent attack surface where malicious instructions could be embedded in the code or comments being scanned to attempt to influence the agent's logic.
- Ingestion points: Source code files and snippets provided in the agent's execution context.
- Boundary markers: Not present; the instructions do not define specific delimiters to separate untrusted code from the agent's instructional logic.
- Capability inventory: The agent using this skill is expected to have file system modification capabilities to add missing instrumentation.
- Sanitization: No sanitization or validation of the scanned content is performed before processing.
Audit Metadata