tool-failure-recovery
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and analyze external data from tool outputs (stdout/stderr) and logs to diagnose failures, which represents an indirect prompt injection surface.
- Ingestion points: The agent reads stdout, stderr, and log files as part of the diagnosis process (referenced in
references/current-guidance.md). - Boundary markers: There are no explicit prompt delimiters or boundary markers specified for isolating the log data from the agent's instructions.
- Capability inventory: The skill provides instructions for utilizing file-editing and shell execution tools to fix code and configuration errors.
- Sanitization: The skill includes a defensive instruction to "Do not paste secret values from logs," which mitigates potential data exposure during the reporting phase.
Audit Metadata