error-explanation-generator
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because its core function is to analyze and interpret untrusted data (error messages and stack traces) which may contain embedded malicious instructions.
- Ingestion points: User-supplied error messages, stack traces, and compiler diagnostics defined in the skill instructions and processed at runtime.
- Boundary markers: Absent. The instructions do not define specific delimiters or warnings to treat the error content as passive data.
- Capability inventory: The skill primarily generates natural language explanations and code snippets. Based on the provided configuration, it does not appear to use dangerous tools (file system, network, or subprocess).
- Sanitization: Absent. There is no mention of filtering, escaping, or validating the error content before it is processed by the agent.
Audit Metadata