sc-log-fix
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes logs from various sources which can contain untrusted data.
- Ingestion points: Discovers and reads log files in
logs/,var/log/, and via service managers like Docker (docker compose logs), Systemd (journalctl), and PM2. - Boundary markers: The skill does not define clear boundaries or provide instructions to ignore embedded commands within the log data during the analysis phase.
- Capability inventory: The skill utilizes the
Edittool for file modification andBashfor command execution (e.g., running tests, docker commands) during the fix and validation phases. - Sanitization: No explicit sanitization or filtering of log content is described before it is used to inform root cause analysis and code fixes.
- [COMMAND_EXECUTION]: The skill executes various shell commands based on the detected environment and log analysis results.
- Evidence: Uses
docker compose,journalctl, andpm2for log source discovery. - Evidence: Executes validation commands like
pytestandnpm testafter applying fixes. - [DYNAMIC_EXECUTION]: The skill uses dynamic interpreter calls to determine file formats.
- Evidence: Executes a dynamic Python snippet via
python3 -cto check if a log line is valid JSON.
Audit Metadata