errors
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and analyzes data from
.claude/logs/errors.jsonl, which contains tool inputs, error messages, and command outputs from various sessions. This content can be influenced by external sources or malicious inputs that caused the errors in the first place. - Ingestion points: The
.claude/logs/errors.jsonllog file is used as the primary data source for the/errorsandanalyze_errors.pyworkflows. - Boundary markers: No specific boundary markers or "ignore instructions" delimiters are defined for the processed log content.
- Capability inventory: The skill utilizes
Bash(for script execution),Read(to access logs), andGrep(to search patterns). - Sanitization: There is no evidence of content sanitization or validation performed on the log entries before they are analyzed by the agent.
- [COMMAND_EXECUTION]: The skill performs command execution through the use of local scripts and hooks. Specifically, it executes
python .claude/scripts/analyze_errors.pyto perform batch analysis and uses shell hooks like.claude/hooks/posttool/error-collector.shto log data. - [EXTERNAL_DOWNLOADS]: The
SKILL.mdfile suggests that users install a third-party utility calledportlessusingnpm i -g portlessto assist with local service troubleshooting. Whileportlessis a recognized tool for managing local named domains, suggesting the installation of external packages introduces a minor dependency on third-party software.
Audit Metadata