reliability-engineering
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEDATA_EXFILTRATION
Full Analysis
- Data Exposure & Exfiltration (LOW): The skill performs network operations and accesses system memory metrics, which are standard for health-check functionality but require monitoring.\n- Evidence:
templates/health-check.tsimplementscreateHttpCheckwhich uses thefetch()API to query external URLs.\n- Evidence:templates/health-check.tsimplementscreateMemoryCheckwhich accessesprocess.memoryUsage()to gather system-level telemetry.\n- Indirect Prompt Injection (LOW): The skill ingests data from external network responses and database error messages which could serve as an injection vector if health reports are directly interpreted by an LLM.\n- Ingestion points: Network responses increateHttpCheckand error messages increateDatabaseCheck(file:templates/health-check.ts).\n- Boundary markers: Absent; the templates do not include delimiters or specific instructions for an agent to ignore embedded content.\n- Capability inventory: Network requests viafetch()intemplates/health-check.tsandtemplates/circuit-breaker.ts.\n- Sanitization: Absent; error messages and response status data are passed directly into the health report objects without filtering.
Audit Metadata