forensics-checklist
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process forensic artifacts (logs, memory dumps, system configurations) which are externally controlled and may contain malicious instructions designed to manipulate the agent.\n
- Ingestion points: Forensic data sources such as system logs, memory images, and configuration files identified in Section 3.\n
- Boundary markers: The skill contains an explicit 'Prompt Injection Safety Notice' in Section 8 that instructs the agent to treat evidence as data only and ignore embedded directives.\n
- Capability inventory: The agent's capabilities are limited to 'Read', 'Grep', and 'Glob' tools as specified in the YAML frontmatter.\n
- Sanitization: The skill relies on natural language instructions and role boundaries defined in Section 8 to mitigate the risk of processing attacker-planted content.
Audit Metadata