rollbar-reader

Pass

Audited by Gen Agent Trust Hub on Mar 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the @delexw/rollbar-cli package globally via NPM. This dependency is authored by the skill's creator and provides the core functionality for interacting with Rollbar data.
  • [COMMAND_EXECUTION]: The skill executes various rollbar CLI subcommands (e.g., items list, occurrences get) to fetch error data. It also uses mkdir to create local directories for temporary storage of JSON assets and the final analysis report.
  • [PROMPT_INJECTION]: The skill ingests untrusted data from Rollbar error logs and occurrences. This presents a surface for indirect prompt injection where malicious content in logs could influence the agent's behavior.
  • Ingestion points: rollbar items list and rollbar occurrences get in SKILL.md.
  • Boundary markers: None identified; data is processed directly.
  • Capability inventory: Bash (rollbar CLI, mkdir, test), Read, Write, Edit in SKILL.md.
  • Sanitization: No explicit sanitization of the error log content is performed before report generation.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 14, 2026, 03:41 PM