bug-repro-test-first
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely instructional and follows established software engineering practices. It does not contain any suspicious commands, hidden code, or unauthorized network access.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to act upon user-provided bug reports, which represents an attack surface for indirect prompt injection. However, this is inherent to the task of debugging and is not a malicious feature of the skill itself.
- Ingestion points: SKILL.md identifies user reports and reproduction cases as the primary input.
- Boundary markers: None specified in the workflow instructions.
- Capability inventory: The workflow involves running reproduction tests and shell commands as part of the debugging process.
- Sanitization: No specific sanitization or isolation of user-provided code is mentioned.
Audit Metadata