wireless-telemetry
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external telemetry data via the
scripts/analyze_trace.pyscript, which represents a surface for indirect prompt injection.\n - Ingestion points: The
scripts/analyze_trace.pyscript reads external CSV trace files provided via the command line (e.g.,TRACE.csv).\n - Boundary markers: The script implements strict schema validation against the
FIELDSlist and checks theschema_version. It also enforces a 25MB file size limit and a 100,000 row limit to prevent resource exhaustion.\n - Capability inventory: The skill uses the
uv runcommand to execute local Python scripts. The script itself performs statistical analysis and outputs results as JSON, which the agent then interprets to form responses.\n - Sanitization: Data values are type-checked (e.g., converted to floats or ints) and length-restricted to 128 characters, reducing the capacity for complex injection payloads.\n- [COMMAND_EXECUTION]: The skill directs the agent to execute a local utility script (
scripts/analyze_trace.py) using theuvtool to perform data analysis.
Audit Metadata