ds-unstick
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use common shell utilities such as
git stash,git checkout,grep, andwhichto manage the codebase state and verify environment configurations during troubleshooting. - [DYNAMIC_EXECUTION]: Step 4 of the workflow encourages the creation and execution of minimal diagnostic scripts to test specific assumptions about the code's behavior.
- [INDIRECT_PROMPT_INJECTION]: The workflow involves ingesting and analyzing error messages and logs, which creates a potential surface for instructions hidden within data.
- Ingestion points: Step 2 directs the agent to ingest exact error text from the environment.
- Boundary markers: The skill does not specify the use of delimiters to separate ingested error content from the agent's internal instructions.
- Capability inventory: The agent maintains access to shell commands and script execution while analyzing these inputs.
- Sanitization: The instructions do not include steps to sanitize or filter the content of the ingested error messages.
Audit Metadata