diagnosing-bugs

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill requires the agent to construct and execute arbitrary shell commands such as git bisect run, curl, and various test runners to establish a deterministic pass/fail signal for debugging.
  • [INDIRECT_PROMPT_INJECTION]: The diagnostic process involves reading external, potentially untrusted data such as error logs, network traces, and developer-provided artifacts, which creates a surface where embedded instructions could influence behavior.
  • Ingestion points: Processes CONTEXT.md, ADRs, log files, trace files, and user-provided captured artifacts via the hitl-loop script.
  • Boundary markers: No specific delimiters or safety wrappers are mandated for the ingestion of these external files within the prompt logic.
  • Capability inventory: Extensive use of subprocess calls via shell commands, file system access, and network operations.
  • Sanitization: The skill includes a 'Redact' section providing specific instructions to replace secrets with and avoid including auth headers in artifacts.
  • [DYNAMIC_EXECUTION]: The instructions encourage generating throwaway harnesses and transient reproduction scripts, including Playwright/Puppeteer or differential loops, that are executed at runtime to verify hypotheses.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 06:53 AM
Security Audit — agent-trust-hub — diagnosing-bugs