troubleshooting
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to perform package installations using
pip install missing-packageto resolve missing node errors. This pattern encourages the execution of commands that install arbitrary third-party code without specifying versions or verifying sources. - [EXTERNAL_DOWNLOADS]: The instructions suggest using the
download_modeltool to fetch model files from external URLs, specifically recommending searches for quantized variants of Flux and SDXL models. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data from external sources like system logs and execution tracebacks.
- Ingestion points: System logs retrieved via
get_system_stats (action:"logs")and execution history retrieved viaget_history(action="diagnose"). - Boundary markers: Absent. The instructions do not include delimiters or warnings to ignore potential instructions embedded within the logs or error messages.
- Capability inventory: The skill environment includes the ability to install packages, download files, and modify workflows.
- Sanitization: Absent. There is no mention of filtering or sanitizing the log data before it is processed by the agent.
Audit Metadata