monitor
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill identifies surfaces where the agent ingests and analyzes untrusted external data, which could contain malicious instructions.
- Ingestion points: The agent is instructed to read error messages, stack traces, and user-provided issue descriptions in
SKILL.mdandINCIDENT-RESPONSE.md. - Boundary markers: The instructions do not specify explicit delimiters or isolation techniques for the untrusted data being analyzed.
- Capability inventory: The skill leverages other capabilities like the
debugskill for root cause analysis anddeployfor hotfixes or rollbacks. - Sanitization: The instructions include proactive warnings to avoid logging sensitive data such as passwords, API keys, or session tokens.
- [EXTERNAL_DOWNLOADS]: The skill guides the user to install well-known error tracking packages and utilize established monitoring services.
- Evidence: Recommends installing the
@sentry/nextjspackage and configuring integrations with services such as UptimeRobot, Stripe, and SendGrid. - [COMMAND_EXECUTION]: The documentation provides templates for executing standard shell-based version control operations for deployment recovery.
- Evidence:
INCIDENT-RESPONSE.mdoutlines procedures usinggit revertandgit pushto manage production rollbacks.
Audit Metadata