diagnosing-bugs
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of tests, CLI tools, and automation scripts to verify bug fixes, which is a core part of the debugging workflow.\n- [DYNAMIC_EXECUTION]: The skill involves creating and executing transient test harnesses and reproduction scripts, such as the provided human-in-the-loop template.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze external data like logs and error reports, which creates a potential surface for indirect prompt injection, although this is inherent to the debugging process.\n
- Ingestion points: External artifacts including log files, HAR files, and core dumps mentioned in Phase 1 of SKILL.md.\n
- Boundary markers: The instructions do not specify explicit delimiters for untrusted data.\n
- Capability inventory: Subprocess execution for reproduction scripts, file writing for regression tests, and network access for diagnostic curl commands.\n
- Sanitization: The skill lacks explicit sanitization steps for the data it processes.
Audit Metadata