tracking-service-reliability
Warn
Audited by Gen Agent Trust Hub on Apr 4, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/generate_sla_report.pyincludes agenerate_scriptmethod that writes arbitrary content to a shell script file and applies execution permissions usingchmod 0o755. This functionality allows for the creation and preparation of executable payloads based on dynamic input provided via command-line arguments. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its handling of external data.
- Ingestion points: The skill reads Service Level Indicator (SLI) definitions from
slos/sli-definitions.yamland processes historical performance data as specified inSKILL.md. - Boundary markers: There are no defined delimiters or instructions to treat external data as untrusted or to ignore embedded instructions.
- Capability inventory: The agent has access to file modification tools (
Write,Edit), shell access (Bash), and a script that can generate executable files. - Sanitization: The skill lacks validation or escaping mechanisms for the ingested configuration and metrics data before they are used in reporting or tracking workflows.
Audit Metadata