base44-troubleshooter
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto execute the officialbase44CLI package from the npm registry. This is standard vendor functionality and targets a well-known service. - [INDIRECT_PROMPT_INJECTION]: The skill performs analysis on production logs and workflow execution history, which are external data sources that may contain untrusted strings.
- Ingestion points: Data retrieved via
base44 logsandbase44 workflows runsas described inSKILL.md. - Boundary markers: The instructions do not specify the use of delimiters or warnings for the agent to ignore instructions that might be embedded in log content.
- Capability inventory: The agent has shell command execution capabilities via
npxand local file reading viacat. - Sanitization: There are no explicit instructions to sanitize or validate the log messages before processing.
Audit Metadata