skills/yonatangross/orchestkit/errors/Gen Agent Trust Hub

errors

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests and analyzes data from .claude/logs/errors.jsonl, which contains tool inputs, error messages, and command outputs from various sessions. This content can be influenced by external sources or malicious inputs that caused the errors in the first place.
  • Ingestion points: The .claude/logs/errors.jsonl log file is used as the primary data source for the /errors and analyze_errors.py workflows.
  • Boundary markers: No specific boundary markers or "ignore instructions" delimiters are defined for the processed log content.
  • Capability inventory: The skill utilizes Bash (for script execution), Read (to access logs), and Grep (to search patterns).
  • Sanitization: There is no evidence of content sanitization or validation performed on the log entries before they are analyzed by the agent.
  • [COMMAND_EXECUTION]: The skill performs command execution through the use of local scripts and hooks. Specifically, it executes python .claude/scripts/analyze_errors.py to perform batch analysis and uses shell hooks like .claude/hooks/posttool/error-collector.sh to log data.
  • [EXTERNAL_DOWNLOADS]: The SKILL.md file suggests that users install a third-party utility called portless using npm i -g portless to assist with local service troubleshooting. While portless is a recognized tool for managing local named domains, suggesting the installation of external packages introduces a minor dependency on third-party software.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 05:22 AM
Security Audit — agent-trust-hub — errors