skills/avdlee/rocketsimapp/diagnose/Gen Agent Trust Hub

diagnose

Pass

Audited by Gen Agent Trust Hub on Jul 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructions and associated bash template involve the creation and execution of shell-based diagnostic tasks. This includes running test suites, curl commands, and custom reproduction scripts to verify bug fixes and performance improvements.
  • [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface through its interaction with external debugging data and human input.
  • Ingestion points: User-provided responses captured in scripts/hitl-loop.template.sh and external diagnostic artifacts such as log files, traces, or network captures.
  • Boundary markers: The agent lacks explicit delimiters to differentiate between its core instructions and the untrusted data ingested during the diagnostic process.
  • Capability inventory: The agent has permissions to execute shell commands, perform network requests, and modify the filesystem to create diagnostic harnesses.
  • Sanitization: No sanitization or validation mechanisms are specified for handling the ingested external data.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 19, 2026, 09:42 PM
Security Audit — agent-trust-hub — diagnose