diagnose
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data sources, specifically mentioned in Phase 1 as 'captured artifacts (HAR file, log dump, core dump)'.
- Ingestion points: Data enters the agent's context through the analysis of user-provided or environment-captured logs, HAR files, and trace data (referenced in
SKILL.md). - Boundary markers: No specific delimiters or safety instructions are defined to prevent the agent from following instructions embedded within these external artifacts.
- Capability inventory: The skill utilizes
bashscripts,curl,playwright, andgit bisectcommands to automate the diagnosis loop. - Sanitization: The instructions do not specify any validation or sanitization procedures for the ingested data before it is used to influence the agent's diagnostic hypotheses or tool usage.
- [DYNAMIC_EXECUTION]: The diagnostic process involves the creation and execution of temporary scripts to establish a feedback loop (Phase 1). This includes 'CLI invocation with a fixture input', 'Headless browser scripts (Playwright / Puppeteer)', and 'Throwaway harnesses' created at runtime.
- [COMMAND_EXECUTION]: The skill facilitates the execution of various system commands and developer tools, including
curlfor HTTP requests,git bisect runfor version bisection, and custom bash scripts (using thescripts/hitl-loop.template.shtemplate) to interact with the environment.
Audit Metadata