diagnose
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides templates and instructions for the agent to execute diagnostic shell commands, such as network requests (curl), test runners (pytest, dotnet test), and performance profilers (py-spy, dotnet-counters). These are standard tools for root-cause analysis and are used within the scope of the skill's intended purpose.\n- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection as it is designed to process untrusted external data, including error messages, log files, and captured network traces.\n
- Ingestion points: Untrusted data enters the agent context during Phase 0 (Symptom capture) and Phase 1 (Replay of captured traces/HAR files).\n
- Boundary markers: The skill explicitly instructs the agent to use a redaction step ('Redact every secret first') and to quote only relevant lines, which acts as a boundary against large-scale injection.\n
- Capability inventory: The agent is granted capabilities to write scripts, execute shell commands, and read local files to build feedback loops.\n
- Sanitization: The skill mandates a specific redaction process where secrets are replaced with '', reducing the risk of exfiltrating sensitive data that might be targeted by an injection attack.
Audit Metadata