investigate
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data provided by the user (such as stack traces, error reports, and pasted logs) and external sources (databases, Redis, and configuration files). This data is processed in a context where the agent has access to highly capable tools like
BashandEdit.\n - Ingestion points: User-supplied messages containing symptoms and reproduction steps, and system data read via the
Readtool or database queries.\n - Boundary markers: The skill does not explicitly define delimiters or specific instructions to ignore embedded directives in the data being investigated.\n
- Capability inventory: The agent is authorized to use
Bashfor shell command execution andEditfor modifications across the project files.\n - Sanitization: The instructions include a specific security requirement to strip hostnames, IPs, and customer data before performing external searches via
WebSearch, which mitigates data leakage risks.\n- [COMMAND_EXECUTION]: The skill uses theBashtool to perform complex diagnostic tasks includinggit bisectfor regression identification and environment variable inspection (env | grep APP_). These commands are standard for debugging but involve broad read and execute access to the system environment.
Audit Metadata