bug
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of natural language instructions for documentation and does not contain any executable code, shell commands, or network request patterns.
- [SAFE]: The instructions demonstrate security best practices by explicitly directing the agent to keep credentials and private session content out of the generated reports.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a standard attack surface for indirect prompt injection as it is designed to process untrusted user-supplied data (defect reports). 1. Ingestion points: defect reports provided by users in the conversation context. 2. Boundary markers: none specified in the instructions. 3. Capability inventory: limited to text report generation and acting as context for future repair tasks. 4. Sanitization: includes explicit instructions to exclude sensitive credentials.
Audit Metadata