diagnose
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data, including network traces, log dumps, and HAR files, which constitutes a surface for indirect prompt injection. Maliciously crafted data could contain hidden instructions aiming to alter the agent's behavior during the diagnosis process.\n
- Ingestion points: SKILL.md Phase 1 (captured traces, payloads, event logs) and Phase 2 (HAR files, log dumps, core dumps).\n
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are specified in the provided instructions.\n
- Capability inventory: The skill utilizes command execution (bash, curl, tests), file system access, and network operations to establish reproduction loops.\n
- Sanitization: No sanitization or validation logic is defined for the ingested external artifacts.\n- [COMMAND_EXECUTION]: The workflow relies on the generation and execution of various scripts (e.g., shell, Node.js, Python) to create deterministic reproduction loops. This includes the execution of
scripts/hitl-loop.template.sh, an interactive bash script used to capture human user input via standard input during the debugging process.
Audit Metadata