rollbar-reader
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@delexw/rollbar-clipackage globally via NPM. This dependency is authored by the skill's creator and provides the core functionality for interacting with Rollbar data. - [COMMAND_EXECUTION]: The skill executes various
rollbarCLI subcommands (e.g.,items list,occurrences get) to fetch error data. It also usesmkdirto create local directories for temporary storage of JSON assets and the final analysis report. - [PROMPT_INJECTION]: The skill ingests untrusted data from Rollbar error logs and occurrences. This presents a surface for indirect prompt injection where malicious content in logs could influence the agent's behavior.
- Ingestion points:
rollbar items listandrollbar occurrences getinSKILL.md. - Boundary markers: None identified; data is processed directly.
- Capability inventory:
Bash(rollbar CLI, mkdir, test),Read,Write,EditinSKILL.md. - Sanitization: No explicit sanitization of the error log content is performed before report generation.
Audit Metadata